Re: (sql-postgres-login-params): Add user and database defaults.

[Sam Steingold <sds@gnu.org>]

> * Michael Mauger <zvpunry@znhtre.pbz> [2014-11-09 23:39:24 +0000]:
>
>> On Friday, November 7, 2014 2:37 PM, Sam Steingold <sds@gnu.org> wrote:
>
>> Michael,
>> Why did you add defaults to the sql-postgres-login-params option?
>> No other sql-<product>-login-params have them.
>> (The list also misses the password, but that was even before your
>> 36827ec251bb18183110463a83d55b205653fd5d commit).
>> Thanks.
>
>
> That was a commit from 4 years ago; I have problems remembering last week.

:-)

> A few related items:
>
> * The defaults specified in the login-params are the same as the psql
> program, but I am certainly open to changing the defaults or
> eliminating them entirely if people agree.  I don't use PG often so
> I'm certainly open to feedback from regular users of it.  And
> obviously, you can customize its value to suit your workflow better.

I don't think these defaults are useful (to put it mildly).

> * The reason that there is no support for entering the password in
> postgres is that there is no command line option or syntax available
> to pass the value in `psql'.

"psql -W" forces password prompt, so, I think, there should be a way for
me to tell emacs which password to use.


> There is a long open bug report identifying passing passwords on the
> command line as being a security risk, but I have not implemented an
> alternative mechanism.  I am hacking a mechanism currently to not pass
> password on the command line and provide it as program input when
> prompted.  Postgres is one platform that could benefit from such behavior.

I know of security implication of passing passwords on the command
line, but I disagree that this should be disabled. A note in the man
page and the usage message printed by "--help" should be enough.


> Any feedback or patches are actively encouraged.

Thanks.

-- 
Sam Steingold (http://sds.podval.org/) on darwin Ns 10.3.1343
http://www.childpsy.net/ http://jihadwatch.org http://islamexposedonline.com
http://americancensorship.org http://truepeace.org http://honestreporting.com
If your VCR is still blinking 12:00, you don't want Linux.