From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
---|---|
To: | Christoph Dalitz <christoph(dot)dalitz(at)hs-niederrhein(dot)de> |
Cc: | Troy(dot)Campano(at)libertymutual(dot)com, pgsql-general(at)postgresql(dot)org |
Subject: | Re: Storing passwords |
Date: | 2002-12-27 18:51:04 |
Message-ID: | 200212271851.gBRIp4020071@candle.pha.pa.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Christoph Dalitz wrote:
> Date: Fri, 27 Dec 2002 10:01:30 -0500
> From: "Campano, Troy" <Troy(dot)Campano(at)LibertyMutual(dot)com>
> >
> > Is there a PostgreSQL function that allows you to store passwords, but it encrypts them?
> > If not, are there any recommendations for storing passwords?
> >
> The easiest solution would be a stored procedure written in C that simply
> calls the crypt() function (for details: "man crypt"). In that case you will
> also need to store the "salt" with the encrypted password.
>
> Even if you have not yet written any stored procedure, it should be done
> in less than two hours. See the documentation on "server side programming" for details.
Also, see /contrib/pgcrypto for encryption routines.
--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073
From | Date | Subject | |
---|---|---|---|
Next Message | Bruce Momjian | 2002-12-27 19:21:02 | Re: Storing passwords |
Previous Message | Tom Lane | 2002-12-27 18:39:58 | Re: Trouble with UNIX TimeStamps |