From: | Neil Conway <nconway(at)klamath(dot)dyndns(dot)org> |
---|---|
To: | pgsql-general(at)postgresql(dot)org |
Subject: | Re: How crypting passwords in postgres DB? |
Date: | 2000-12-22 17:54:55 |
Message-ID: | 20001222125455.A547@klamath.dyndns.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
On Fri, Dec 22, 2000 at 02:14:59PM +0100, ouldm(at)linuxatbusiness(dot)com wrote:
> However, passwords appear clear in the database.
> How passwords can be crypted in the database?
Postgres doesn't include any password/hashing functions
natively. So you'll either need to write the hashing functions
yourself (someone posted MD5 and SHA1 functions on the list
earlier), or do the hashing in your client code (i.e.
when the user creates an account, take the cleartext password,
get the MD5/SHA1 digest of it, and store the digest in
the database).
HTH,
Neil
--
Neil Conway <neilconway(at)home(dot)com>
Get my GnuPG key from: http://klamath.dyndns.org/mykey.asc
Encrypted mail welcomed
In the beginning the Universe was created. This has made a lot of
people very angry and been widely regarded as a bad move.
-- Douglas Adams
From | Date | Subject | |
---|---|---|---|
Next Message | Tim Barnard | 2000-12-22 19:37:24 | Max sessions question |
Previous Message | Jeff Davis | 2000-12-22 16:52:56 | allowing users access to a trusted C function |