Re: db_user_namespace, md5 and changing passwords

From: Alvaro Herrera <alvherre(at)commandprompt(dot)com>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Fernando Moreno <azazel(dot)7(at)gmail(dot)com>, PostgreSQL <pgsql-general(at)postgresql(dot)org>
Subject: Re: db_user_namespace, md5 and changing passwords
Date: 2008-10-08 00:51:34
Message-ID: 20081008005134.GF19440@alvh.no-ip.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-hackers

Bruce Momjian escribió:

> Well, I posted about this in August with no one replying:
>
> http://archives.postgresql.org/pgsql-admin/2008-08/msg00068.php
>
> Basically, there is a mismatch between what libpq and the backend think
> is the username, and that affects how MD5 uses the salt on the two sides
> of the connection.

I totally agree that this needs a redesign, but we must provide
something to replace it with, not just rip it off.

> The minimal solution would be to document this and print a proper
> error message.

Seems fair.

--
Alvaro Herrera http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Alvaro Herrera 2008-10-08 00:52:45 Re: pg_hba.conf use hostname not IP
Previous Message Bill Reynolds 2008-10-08 00:36:18 Re: Left outer join question

Browse pgsql-hackers by date

  From Date Subject
Next Message Alvaro Herrera 2008-10-08 00:57:21 Re: query path, and rules
Previous Message KaiGai Kohei 2008-10-07 23:34:50 Re: Updates of SE-PostgreSQL 8.4devel patches