Re: How crypting passwords in postgres DB?

From: Neil Conway <nconway(at)klamath(dot)dyndns(dot)org>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: How crypting passwords in postgres DB?
Date: 2000-12-22 17:54:55
Message-ID: 20001222125455.A547@klamath.dyndns.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Fri, Dec 22, 2000 at 02:14:59PM +0100, ouldm(at)linuxatbusiness(dot)com wrote:
> However, passwords appear clear in the database.
> How passwords can be crypted in the database?

Postgres doesn't include any password/hashing functions
natively. So you'll either need to write the hashing functions
yourself (someone posted MD5 and SHA1 functions on the list
earlier), or do the hashing in your client code (i.e.
when the user creates an account, take the cleartext password,
get the MD5/SHA1 digest of it, and store the digest in
the database).

HTH,

Neil

--
Neil Conway <neilconway(at)home(dot)com>
Get my GnuPG key from: http://klamath.dyndns.org/mykey.asc
Encrypted mail welcomed

In the beginning the Universe was created. This has made a lot of
people very angry and been widely regarded as a bad move.
-- Douglas Adams

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Tim Barnard 2000-12-22 19:37:24 Max sessions question
Previous Message Jeff Davis 2000-12-22 16:52:56 allowing users access to a trusted C function