Обсуждение: Re: iso-8859-1 token in connection string
Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well possiblya bug. regards, Prasad
On Wed, Mar 4, 2015 at 10:54 PM, Prasad <prasad.s@mail.com> wrote: > Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well possiblya bug. No, it's a security "feature". Using passwords on the command line is a bad idea as other users can see it in ps output etc. Use a PGPASSFILE instead. -- Dave Page Blog: http://pgsnake.blogspot.com Twitter: @pgsnake EnterpriseDB UK: http://www.enterprisedb.com The Enterprise PostgreSQL Company
I think, it's not very clear from documentation, when user see "connection string" ,they will tempt to use password as well, as one normally do. http://www.pgadmin.org/docs/1.20/commandline.html regards, Prasad Sent: Thursday, March 05, 2015 at 8:53 AM From: "Dave Page" <dpage@pgadmin.org> To: Prasad <prasad.s@mail.com> Cc: "pgAdmin Support" <pgadmin-support@postgresql.org>, Clodoaldo <clodoaldo.pinto.neto@gmail.com> Subject: Re: [pgadmin-support] Re: Unknown token in connection string On Wed, Mar 4, 2015 at 10:54 PM, Prasad <prasad.s@mail.com> wrote: > Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well possiblya bug. No, it's a security "feature". Using passwords on the command line is a bad idea as other users can see it in ps output etc. Use a PGPASSFILE instead. -- Dave Page Blog: http://pgsnake.blogspot.com Twitter: @pgsnake EnterpriseDB UK: http://www.enterprisedb.com[http://www.enterprisedb.com] The Enterprise PostgreSQL Company
Thanks - I've updated the docs to note this. On Thu, Mar 5, 2015 at 9:59 AM, Prasad <prasad.s@mail.com> wrote: > I think, it's not very clear from documentation, when user see "connection string" ,they will tempt to use password aswell , as one normally do. > http://www.pgadmin.org/docs/1.20/commandline.html > > regards, > Prasad > > > > Sent: Thursday, March 05, 2015 at 8:53 AM > From: "Dave Page" <dpage@pgadmin.org> > To: Prasad <prasad.s@mail.com> > Cc: "pgAdmin Support" <pgadmin-support@postgresql.org>, Clodoaldo <clodoaldo.pinto.neto@gmail.com> > Subject: Re: [pgadmin-support] Re: Unknown token in connection string > On Wed, Mar 4, 2015 at 10:54 PM, Prasad <prasad.s@mail.com> wrote: >> Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well possiblya bug. > > No, it's a security "feature". Using passwords on the command line is > a bad idea as other users can see it in ps output etc. Use a > PGPASSFILE instead. > > -- > Dave Page > Blog: http://pgsnake.blogspot.com > Twitter: @pgsnake > > EnterpriseDB UK: http://www.enterprisedb.com[http://www.enterprisedb.com] > The Enterprise PostgreSQL Company -- Dave Page Blog: http://pgsnake.blogspot.com Twitter: @pgsnake EnterpriseDB UK: http://www.enterprisedb.com The Enterprise PostgreSQL Company