Re: SCRAM auth and Pgpool-II

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: Tatsuo Ishii <ishii(at)sraoss(dot)co(dot)jp>
Cc: michael(dot)paquier(at)gmail(dot)com, robertmhaas(at)gmail(dot)com, pgsql-hackers(at)postgresql(dot)org
Subject: Re: SCRAM auth and Pgpool-II
Date: 2017-07-08 00:39:11
Message-ID: 20170708003911.GC1769@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Tatsuo,

* Tatsuo Ishii (ishii(at)sraoss(dot)co(dot)jp) wrote:
> > I recall vaguely Ishii-san mentioning me at PGcon that pgpool was
> > actually cheating, but my memories are a bit fuzzy for this part.
>
> What I meant by "cheating" was, Pgpool-II behaves as if PostgreSQL
> server in md5 auth.
>
> For more details what Pgpool-II actually does in md5 auth, please see:
>
> https://pgpool.net/mediawiki/index.php/FAQ#How_does_pgpool-II_handle_md5_authentication.3F

I see. In short, that's not going to be able to work with SCRAM.

We also certainly can't weaken or break SCRAM to address Pgpool's needs.
I'm afraid an alternative approach will need to be considered for Pgpool
to be able to do what it does today, as I outlined in my other email.

Thanks!

Stephen

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tatsuo Ishii 2017-07-08 01:28:30 Re: SCRAM auth and Pgpool-II
Previous Message Stephen Frost 2017-07-08 00:30:21 Re: SCRAM auth and Pgpool-II