Re: password_encryption, default and 'plain' support

From: Heikki Linnakangas <hlinnaka(at)iki(dot)fi>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Robert Haas <robertmhaas(at)gmail(dot)com>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: password_encryption, default and 'plain' support
Date: 2017-05-04 11:37:15
Message-ID: 5ffa6845-7026-e376-2877-0b2afb0f908a@iki.fi
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 05/03/2017 08:40 PM, Tom Lane wrote:
> The other question I can think to ask is what will happen during
> pg_upgrade, given an existing installation with one or more passwords
> stored plain. If the answer is "silently convert to MD5", I'd be
> good with that.

Yes, it will silently convert to MD5. That happened even on earlier
versions, if you had password_encryption=on in the new cluster (which
was the default).

I'm planning to go ahead with the attached patch for this (removing
password_encryption='plain' support, but keeping the default as 'md5').

- Heikki

Attachment Content-Type Size
0001-Remove-support-for-password_encryption-off-plain.patch text/x-diff 44.9 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Rahila Syed 2017-05-04 11:44:02 Re: Adding support for Default partition in partitioning
Previous Message Amit Kapila 2017-05-04 11:13:32 Re: statement_timeout is not working as expected with postgres_fdw