From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Cc: | Vince Vielhaber <vev(at)michvhf(dot)com>, pgsql-hackers(at)postgreSQL(dot)org |
Subject: | Re: md5 again |
Date: | 2000-07-11 16:49:59 |
Message-ID: | 200007111649.MAA11496@candle.pha.pa.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
> Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> > MD5(MD5(username+user_salt)+random_salt)
Sorry, it is:
MD5(MD5(password+user_salt)+random_salt)
>
> > Postmaster takes its pg_shadow MD5(username+user_salt) and does another
> > MD5 with the random salt and compares it with what was sent from the
> > client.
>
> Doesn't seem quite right ... where's the password?
>
> regards, tom lane
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
From | Date | Subject | |
---|---|---|---|
Next Message | Bruce Momjian | 2000-07-11 16:51:28 | Re: md5 again |
Previous Message | Jan Wieck | 2000-07-11 16:49:58 | Re: AW: update on TOAST status' |