Re: Database users Passwords

From: Jorge Godoy <jgodoy(at)gmail(dot)com>
To: Shane Ambler <pgsql(at)007Marketing(dot)com>
Cc: Jeff Davis <pgsql(at)j-davis(dot)com>, DEV <dev(at)umpa-us(dot)com>, pgsql-general(at)postgresql(dot)org
Subject: Re: Database users Passwords
Date: 2006-10-17 19:00:05
Message-ID: 873b9mlqdm.fsf@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-docs pgsql-general

Shane Ambler <pgsql(at)007Marketing(dot)com> writes:

> What Dev would want to look for (probably create) is a small script that will
> read his list of crypt passwords and un-crypt them into a create role string
> that is fed to psql.

Except that the hash used is unidirectional, i.e., there's no way to decrypt
it besides a brute force attack or something like that.

If he's got, e.g., 10 users with strong passwords this kind of thing can take
some weeks.

--
Jorge Godoy <jgodoy(at)gmail(dot)com>

In response to

Responses

Browse pgsql-docs by date

  From Date Subject
Next Message Shane Ambler 2006-10-17 19:35:45 Re: Database users Passwords
Previous Message Shane Ambler 2006-10-17 18:09:02 Re: Database users Passwords

Browse pgsql-general by date

  From Date Subject
Next Message Ron Peterson 2006-10-17 19:25:05 uuid c function contrib
Previous Message Rafal Pietrak 2006-10-17 18:53:29 Re: A query planner that learns