BUG #13669: Encrypted Password documentation lacking for CREATE ROLE

From: postgresql(dot)org(at)gclough(dot)com
To: pgsql-bugs(at)postgresql(dot)org
Subject: BUG #13669: Encrypted Password documentation lacking for CREATE ROLE
Date: 2015-10-08 15:30:30
Message-ID: 20151008153030.2911.86466@wrigleys.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

The following bug has been logged on the website:

Bug reference: 13669
Logged by: Greg Clough
Email address: postgresql(dot)org(at)gclough(dot)com
PostgreSQL version: 9.4.5
Operating system: Documentation Bug
Description:

There is no definition of what "already in MD5-encrypted format" means in
the documentation:

http://www.postgresql.org/docs/9.4/static/sql-createrole.html

Could we please add:

Passwords in PostgreSQL MD5-encrypted (hashed) format are the string 'md5'
followed by an MD5 hash of a concatenation of the cleartext password with
the role.

md5_format ::= 'md5', md5(<password><role_name>)

For example, for the role "role1" with the password "TrustNo1" the process
for creating a password to use would be:

'md5' + md5('TrustNo1role1')

'md5' + 'e0024afa59108ab5d4b25dfc54fc245d'

'md5e0024afa59108ab5d4b25dfc54fc245d'

This could then be used to create the role thus:

CREATE ROLE role1 ENCRYPTED PASSWORD 'md5e0024afa59108ab5d4b25dfc54fc245d';

Browse pgsql-bugs by date

  From Date Subject
Next Message Bruce Momjian 2015-10-08 18:01:01 Re: BUG #13668: Production server Crash
Previous Message rama2.s 2015-10-08 10:53:34 BUG #13668: Production server Crash