Re: [GENERAL] Password issue

2011-05-20 Thread Albe Laurenz
Mahmoud wrote: > I am trying to create a database by passing arguments to createdb.exe > but createdb always asks me about the password although I passed -W 123 > to it. > > How can I override password request? > > PS > This my test for creating the database > createdb.exe -U postgres -W 123 -O ad

Re: [GENERAL] Password issue

2011-05-19 Thread hubert depesz lubaczewski
On Thu, May 19, 2011 at 05:53:11PM +0300, Mahmoud wrote: > Hi all > I am trying to create a database by passing arguments to > createdb.exe but createdb always asks me about the password although > I passed -W 123 to it. please check docs for createdb http://www.postgresql.org/docs/current/intera

Re: [GENERAL] Password issue

2011-05-19 Thread Ashesh Vashi
'-W' option is there to prompt the password. Use PGPASSWORD environment variable. http://www.postgresql.org/docs/8.3/static/libpq-envars.html *createdb creates a PostgreSQL database.* * * *Usage:* * createdb [OPTION]... [DBNAME] [DESCRIPTION]* * * *Options:* * -D, --tablespace=TABLESPACE defau

[GENERAL] Password issue

2011-05-19 Thread Mahmoud
Hi all I am trying to create a database by passing arguments to createdb.exe but createdb always asks me about the password although I passed -W 123 to it. How can I override password request? PS This my test for creating the database createdb.exe -U postgres -W 123 -O admin -e test Cheers.

Re: [GENERAL] Password issue revisited

2007-02-23 Thread Bruce Momjian
I assume this is not a TODO. --- Magnus Hagander wrote: > >>> The default on *all* windows versions since NT 4.0 (which is when the > >>> directory we use was added) will put this file in a protected directory. > >>> The onl

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Dave Page
Magnus Hagander wrote: > Dave Page wrote: >> Magnus Hagander wrote: >> >>> Just to make things clear, this wouldn't be about another auth method. >>> Windows has an API to store arbitrary passwords in a "secure way". At >>> least it does in XP+, not sure if it was in 2000. >> Would it really solve

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Magnus Hagander
Dave Page wrote: > Magnus Hagander wrote: > >> Just to make things clear, this wouldn't be about another auth method. >> Windows has an API to store arbitrary passwords in a "secure way". At >> least it does in XP+, not sure if it was in 2000. > > Would it really solve Tony's problem though? I'm

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Dave Page
Magnus Hagander wrote: > Just to make things clear, this wouldn't be about another auth method. > Windows has an API to store arbitrary passwords in a "secure way". At > least it does in XP+, not sure if it was in 2000. Would it really solve Tony's problem though? I'm not familiar with the API yo

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Magnus Hagander
Tom Lane wrote: > Magnus Hagander <[EMAIL PROTECTED]> writes: >> Tony Caduto wrote: >>> What about having a wallet type system where the user can create a pass >>> phrase to protect a generated key that would get >>> loaded once per session. That is how KDE allows users to store passwords. > >> I

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Tom Lane
Magnus Hagander <[EMAIL PROTECTED]> writes: > Tony Caduto wrote: >> What about having a wallet type system where the user can create a pass >> phrase to protect a generated key that would get >> loaded once per session. That is how KDE allows users to store passwords. > If we wanted to do that, w

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Magnus Hagander
Tony Caduto wrote: > Magnus Hagander wrote: >> Are we sure we want to do this? (Sorry, didn't notice this thread last >> time) >> >> The default on *all* windows versions since NT 4.0 (which is when the >> directory we use was added) will put this file in a protected directory. >> > Is there tru

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Tony Caduto
Magnus Hagander wrote: Are we sure we want to do this? (Sorry, didn't notice this thread last time) The default on *all* windows versions since NT 4.0 (which is when the directory we use was added) will put this file in a protected directory. Is there truly such a thing on a windows PC? All

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Bruce Momjian
Tom Lane wrote: > "Michael Schmidt" <[EMAIL PROTECTED]> writes: > > ... Regarding how I concluded > > that PGPASSFILE was deprecated for pg_dump, I offer the following. > > > 1. The documentation for pg_dump in the manual (Section VI) includes a > > section labeled "Environment". This lists PG

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Magnus Hagander
>>> The default on *all* windows versions since NT 4.0 (which is when the >>> directory we use was added) will put this file in a protected directory. >>> The only case when it's not protected by default is if you're usnig FAT >>> filesystem, in which case there is nothing you can do about it anywa

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Shane Ambler
Bruce Momjian wrote: Magnus Hagander wrote: Are we sure we want to do this? (Sorry, didn't notice this thread last time) The default on *all* windows versions since NT 4.0 (which is when the directory we use was added) will put this file in a protected directory. The only case when it's not pro

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Bruce Momjian
Magnus Hagander wrote: > Are we sure we want to do this? (Sorry, didn't notice this thread last > time) > > The default on *all* windows versions since NT 4.0 (which is when the > directory we use was added) will put this file in a protected directory. > The only case when it's not protected by de

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Magnus Hagander
Are we sure we want to do this? (Sorry, didn't notice this thread last time) The default on *all* windows versions since NT 4.0 (which is when the directory we use was added) will put this file in a protected directory. The only case when it's not protected by default is if you're usnig FAT filesy

Re: [GENERAL] Password issue revisited

2007-02-20 Thread Bruce Momjian
Added to TODO for Win32: o Check .pgpass file permissions --- Shane Ambler wrote: > Michael Schmidt wrote: > > Fellow PostgreSQL fans, > > > 1. I don't see that this would pose a major security risk. In > > fac

Re: [GENERAL] Password issue revisited

2007-01-28 Thread Tom Lane
"Michael Schmidt" <[EMAIL PROTECTED]> writes: > ... Regarding how I concluded > that PGPASSFILE was deprecated for pg_dump, I offer the following. > 1. The documentation for pg_dump in the manual (Section VI) includes a > section labeled "Environment". This lists PGDATABASE, PGHOST, PGPORT, >

Re: [GENERAL] Password issue revisited

2007-01-28 Thread Michael Schmidt
Mr. Lane and Mr. Momjian, Well, I asked and I got an answer. So be it. Regarding how I concluded that PGPASSFILE was deprecated for pg_dump, I offer the following. 1. The documentation for pg_dump in the manual (Section VI) includes a section labeled "Environment". This lists PGDATABASE, PGH

Re: [GENERAL] Password issue revisited

2007-01-28 Thread Shane Ambler
Michael Schmidt wrote: Fellow PostgreSQL fans, 1. I don't see that this would pose a major security risk. In > fact, in applications where the user enters the password for each > session, the password need never be saved to disk, which seems a > definite security advantage. Some folks have

Re: [GENERAL] Password issue revisited

2007-01-27 Thread Bruce Momjian
Tom Lane wrote: > "Michael Schmidt" <[EMAIL PROTECTED]> writes: > > Also, it appears > > from the documentation that the PGPASSFILE environmental variable has > > been deprecated for pg_dump and pg_restore. > > Eh? Certainly not ... where did you get that idea? I assumed he meant the PASSWORD en

Re: [GENERAL] Password issue revisited

2007-01-27 Thread Tom Lane
"Michael Schmidt" <[EMAIL PROTECTED]> writes: > Also, it appears > from the documentation that the PGPASSFILE environmental variable has > been deprecated for pg_dump and pg_restore. Eh? Certainly not ... where did you get that idea? > I would like to ask that we return to outputting the Passwor

Re: [GENERAL] Password issue revisited

2007-01-27 Thread Bruce Momjian
Michael Schmidt wrote: > Fellow PostgreSQL fans, Last year there was a pretty lengthy discussion > (Tom Lane offered a lot of insights) on this list about deprecating > the PGPASSWORD environmental variable. I understand the security issues > here very well. However, up through version 8.1, it ha

[GENERAL] Password issue revisited

2007-01-27 Thread Michael Schmidt
Fellow PostgreSQL fans, Last year there was a pretty lengthy discussion (Tom Lane offered a lot of insights) on this list about deprecating the PGPASSWORD environmental variable. I understand the security issues here very well. However, up through version 8.1, it has been easy to use pg_dump a