O TYM ODCINKU
PostgreSQL may be close to perfect, but a few edge cases still leave room for improvement.
In this Postgres Wishlist session, Ildefonso Camargo looks at some of the friction around LDAP authentication, including the need to store bind credentials in pg_hba.conf and the risk of those credentials appearing in connection logs. He and JD explore alternatives such as PAM and Kerberos, along with the added complexity those solutions can introduce.
The conversation also turns to large objects and a long-standing limitation in PostgreSQL logical replication: large objects are not replicated. JD explains why large objects still have useful characteristics, particularly their ability to stream large files without loading the entire object into memory, and why their legacy status has limited further development.
Ildefonso closes his wishlist with another authentication challenge: even when PostgreSQL relies on an external authentication system, users still need to be created inside the database.
It’s a technical look at a handful of PostgreSQL edge cases where existing workarounds solve part of the problem, but not always without tradeoffs.
