Magnus Hagander <magnus@hagander.net> writes:
> In his scenario, different clients connecting from the same subnet (so
> they can't use different pg_hba lines) need to use different
> authentication methods. (IIRC, this is an environment coming from
> Microsoft SQL Server which does support this)
Perhaps he could use the user name or database name to distinguish
them in pg_hba.conf?
> I think what he's asking for is the ability for a line in the server to
> allow multiple authentication methods, and then for the client to be
> able to specify which one of these it uses.
There's no way we could implement that without a protocol change,
and it doesn't seem worth it to me. The idea that the client gets
to choose seems like a bad idea from a security standpoint anyhow...
regards, tom lane