Re: password method in pg_hba.conf fails

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Emmanuel Dreyfus <manu(at)netbsd(dot)org>, pgsql-general(at)postgresql(dot)org
Subject: Re: password method in pg_hba.conf fails
Date: 2003-03-07 01:56:07
Message-ID: 200303070156.h271u7j03059@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Tom Lane wrote:
> manu(at)netbsd(dot)org (Emmanuel Dreyfus) writes:
> >> We do not support external password files anymore. Sorry.
>
> > What is the benefit of throwing away this feature?
>
> I don't recall the reasoning. You can dig through the pghackers mailing
> list archives if you want to see the discussion.

The issue is that no one was using it, or at least we thought so, and it
could only use crypt, while MD5 is better because it allows random salt
to be added to the over-the-wire password transfer.

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Rich Shepard 2003-03-07 03:10:14 Upgrading to 7.3.2
Previous Message Bruce Momjian 2003-03-07 01:41:44 Re: Dynamically create scheme