"David M. Kaplan" <dkaplan@genes.bio.puc.cl> writes:
> I have a very simple security setup wish. I only want to allow local
> connections where each user can only log into postgres as himself, but
> there isnt a "ident sameuser" option for local connections. Is there
> any way around this? Can anyone explain to me why such an option doesnt
> exist for local connections?
Because IDENT is a TCP protocol and only applies to connections made via
TCP. (Some platforms have ways to get similar info for Unix
connections, but AFAIK they're not standardized.)
If you set environment variable PGHOST to "localhost" then things will
work fairly transparently over TCP ...
regards, tom lane