Tom Lane wrote:
I think there is an alternative solution, if we are only going to patch this in 8.4 and up: provide a new libpq conninfo-string option saying not to use .pgpass, and have dblink add that to the passed-in conninfo string instead of trying to check after the fact. Then we aren't changing dblink's API at all, only replacing a leaky security check with a better one.
Good point -- I'll look into that and post something tomorrow. How does "requirepassword" sound for the option? It is consistent with "requiressl" but a bit long and hard to read. Maybe "require_password"?
Joe -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
