Re: libpq: passwords WAS: scripting & psql issues

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Tino Wildenhain <tino(at)wildenhain(dot)de>
Cc: olly(at)lfix(dot)co(dot)uk, Daniel Martini <dmartini(at)uni-hohenheim(dot)de>, pgsql-general(at)postgresql(dot)org
Subject: Re: libpq: passwords WAS: scripting & psql issues
Date: 2004-08-19 15:44:35
Message-ID: 23929.1092930275@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Tino Wildenhain <tino(at)wildenhain(dot)de> writes:
> PS: the hash would suit better when used in a challenge authorization,
> meaning the server sends a random key, let the client
> hash(random_key || md5( cleartext_password || username ) )
> and compare it on server with
> hash(random_key || stored_password)

Hm? That is exactly what we're doing.

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Jochem van Dieten 2004-08-19 16:02:11 Re: Stored Procedures woes
Previous Message Shelby Cain 2004-08-19 15:41:15 Postgresql 8.0 beta 1 - strange cpu usage statistics and slow vacuuming