>> I am not sure all third party programs concerning scram-sha-256 are >> listed on this. There are some programs that talk to PostgreSQL using >> frontend/backend protocol, but not based on libpq or other native >> drivers (for example Pgpool-II). I guess PgBouncer is in the same >> category too. >> > ... and pgbouncer doesn't support scram-sha-256 authentication method. > There is a bit-rot PR but the discussion died a while ago. It is > widely used and it would be really sad to turn on SCRAM on v13 without > pgbouncer SCRAM support.
I don't how hard it would be for pgbouncer to support scram-sha-256, but it was pretty hard for Pgpool-II to support scram-sha-256. In case of Pgpool-II (it starts to support it since 4.0), it needed to keep clients' password lists. http://www.pgpool.net/docs/latest/en/html/auth-methods.html#AUTH-SCRAM Best regards, -- Tatsuo Ishii SRA OSS, Inc. Japan English: http://www.sraoss.co.jp/index_en.php Japanese:http://www.sraoss.co.jp
