Re: md5 still listed as an option in pg_hba.conf.sample

From: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
To: Michael Paquier <michael(dot)paquier(at)gmail(dot)com>, Mark Dilger <hornschnorter(at)gmail(dot)com>
Cc: Bruce Momjian <bruce(at)momjian(dot)us>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: md5 still listed as an option in pg_hba.conf.sample
Date: 2017-09-27 12:41:49
Message-ID: 7bc8ebeb-2898-1254-a73f-23f4b2c52f53@2ndquadrant.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 9/26/17 18:39, Michael Paquier wrote:
> On Wed, Sep 27, 2017 at 2:41 AM, Mark Dilger <hornschnorter(at)gmail(dot)com> wrote:
>> I was under the impression that md5 was removed for this release, per other
>> threads that I must not have followed closely enough.
>
> md5 is still present, its configuration in pg_hba.conf and
> password_encryption are still here. "plain" is what has been removed.

More precisely, the ability to store passwords in plain text in
pg_authid has been removed. You can still use the authentication method
"password" that sends passwords in plain text over the wire.

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Andrew Dunstan 2017-09-27 12:50:28 Re: ALTER enums (was Re: [COMMITTERS] pgsql: doc: first draft of Postgres 10 release notes)
Previous Message Peter Eisentraut 2017-09-27 12:40:32 Re: Enhancements to passwordcheck