Re: Can we stop defaulting to 'ident'?

On 2020-05-22 10:58, Devrim Gündüz wrote:
> On Fri, 2020-05-22 at 10:52 +0200, Peter Eisentraut wrote:
>> I found that if you use initdb's -A option to set the default
>> authentication method, then the passsword_encryption setting is
>> automatically adjusted in postgresql.conf.  So this patch probably
>> isn't  even necessary.
> 
> Right, but then it also sets scram auth for local connections as well
> (which we don't want)
> 
> That's why I am using --auth-local and --auth-host at the same time.

It will also work if you set only one of --auth-local and --auth-host to 
scram-sha-256.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services