| From: | Alvaro Herrera <alvherre(at)commandprompt(dot)com> |
|---|---|
| To: | Andreas Wenk <a(dot)wenk(at)netzmeister-st-pauli(dot)de> |
| Cc: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-general(at)postgresql(dot)org |
| Subject: | Re: MD5 password issue |
| Date: | 2009-01-15 18:54:38 |
| Message-ID: | 20090115185438.GI6440@alvh.no-ip.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
Andreas Wenk wrote:
> Yes thats correct with the IP address range. Maybe I did not understand
> the auth concept yet. I thought, that with METHOD set to md5, a md5
> hashed password is required. The password is submitted with the PHP 5
> pg_connect function - as plain text.
It is specified to pg_connect as plain text, but it is sent over the
wire md5-hashed.
> So maybe the better question is: what is the difference between METHOD
> password and md5? As I assume now because of your answers, it has
> nothing to do with either the password is md5 hashed or not?
The difference is what travels on the wire.
--
Alvaro Herrera http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support
| From | Date | Subject | |
|---|---|---|---|
| Next Message | mailinglists | 2009-01-15 18:56:06 | Re: Query question |
| Previous Message | Tom Lane | 2009-01-15 18:43:29 | Re: Autovacuum daemon terminated by signal 11 |