On Wed, 2022-07-13 at 02:53 +0000, Ken Yeung wrote:
> From: Laurenz Albe <laurenz.albe@cybertec.at>
> Sent: Wednesday, July 13, 2022 3:16 AM
>
> > You configured "pg_hba.conf" so that a local login without password is
> > not possible. The easiest solution is to change the "pg_hba.conf"
> > entries for "localhost" in IPv4 and IPv6 to "trust" for the duration of
> > the upgrade.
>
> I am afraid this workaround may not be suitable for our case because of certain security consideration.
If you want to make your life difficult, that's ok. Remember that this change
would only be for *local* connections for the duration of the upgrade.
As an alternative, you could create a password file or, if that is also too
insecure, set the PGSSLCERT and PGSSLKEY environment variables so that you can
use a client certificate to connect. Other authentication methods might also
be possible; you'll have to experiment.
Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com