Allow passwordless postgres

[siccegge]

Hi!

Would be cool if one can use simplesamlphp with postgres' peer authentication (i.e. simplesamlphp is authenticated to access the database due to being run by the correct unix account on the system).

This avoids creating passwords that are then stored plain on the server where they don't add any extra security but still (somewhat) interfere with e.g. configuration management.

As far as I can tell the only change needed is allow having username and password empty when connecting to the database.

https://www.postgresql.org/docs/10/auth-methods.html#AUTH-PEER

[tvdijen]

Hi @siccegge ! I'm sorry we never responded to this.. What exactly is the problem here because, looking at the code, it's perfectly possible to leave the password empty in the configuration?