Re: Allow postgres_fdw passwordless non-superuser conns with prior superuser permission

2018-08-08 Thread Robert Haas
On Mon, Aug 6, 2018 at 8:52 AM, Craig Ringer wrote: > Currently postgres_fdw cannot be used with 'cert' authentication, i.e. > client-certificate validation and cert cn => postgres username mapping. You > also can't use things like Kerberos, SSPI, etc with a superuser-created FDW > and username

Re: Allow postgres_fdw passwordless non-superuser conns with prior superuser permission

2018-08-06 Thread Laurenz Albe
Craig Ringer wrote: > Currently postgres_fdw cannot be used with 'cert' authentication, i.e. > client-certificate validation > and cert cn => postgres username mapping. You also can't use things like > Kerberos, SSPI, etc with > a superuser-created FDW and username map. > > To permit this, I'd

Allow postgres_fdw passwordless non-superuser conns with prior superuser permission

2018-08-05 Thread Craig Ringer
Hi all Currently postgres_fdw cannot be used with 'cert' authentication, i.e. client-certificate validation and cert cn => postgres username mapping. You also can't use things like Kerberos, SSPI, etc with a superuser-created FDW and username map. To permit this, I'd like to allow postgres_fdw