Recommend scram-sha-256 instead of md5 authentication in docs
authorMagnus Hagander <[email protected]>
Tue, 31 May 2022 19:59:47 +0000 (21:59 +0200)
committerMagnus Hagander <[email protected]>
Tue, 31 May 2022 19:59:47 +0000 (21:59 +0200)
PostgreSQL 14 changed the default to be scram-sha-256, so we should stop
recommending the user to use md5 or even worse password.

Suggested-By: Daniel Westermann
Author: Jonathan S. Katz
Backpatch-through: 14
Discussion: https://postgr.es/m/GV0P278MB0419A8BAC0B0B84AFA5263D9D2DC9@GV0P278MB0419.CHEP278.PROD.OUTLOOK.COM

doc/src/sgml/runtime.sgml

index 5d98843c884c2ecbe951e8afd00862606406c85a..2352389ab6ae0ce01e39bf286b464175f3be6cbc 100644 (file)
@@ -199,8 +199,8 @@ postgres$ <userinput>initdb -D /usr/local/pgsql/data</userinput>
      <primary>password</primary>
      <secondary>of the superuser</secondary>
    </indexterm>
-   Also, specify <option>-A md5</option> or
-   <option>-A password</option> so that the default <literal>trust</literal> authentication
+   Also, specify <option>-A scram-sha-256</option>
+   so that the default <literal>trust</literal> authentication
    mode is not used; or modify the generated <filename>pg_hba.conf</filename>
    file after running <command>initdb</command>, but
    <emphasis>before</emphasis> you start the server for the first time. (Other