Re: Fwd: Change the auth. postgresql and GIS

On 11/23/22 02:23, Nikolas Hanry wrote:
>
> Dear Community,

Comments inline below.
>
> we tried to change the auth. in our postgresql environment (PostgreSQL V.11)
> from MD5 to SCRUM SHA 256
>
>  - stop the services and killed all active connections
> - changed with alter and set pw the editor user to sha (psql)

a) What is password_encryption set to in postgresql.conf?

b) What was the exact ALTER command?

c) What is meant by editor user?

> - checked if the pw changes successfull (psql and pg4admin)

Check how?

> - tried to open new document from GIS desktop and edit --> error msg.
> connection not available

a) Post the error message.

b) What is GIS desktop?

> - after few minutes the pw synchonized and changed  automatically back

How did you determine the password was changed back?

>
> My questions are:
> Is it possible to work with GIS files (desktop and web) after pw changes
> to SHA 256? We are handling with this issue and don't want to change it
> directly for gisadmin (owner all db's) either with the postgres user
>
> Does the changes revert back automatically to MD5 after a while due
> synchronization? In our test environment tried the same way, although
> the only difference was that we changed as well pg_hba_conf as well
> host     postgres      all        172.xxx.xxx.83/32   scram-sha-256
>  and Type       DB  USER      ADDRESS     METHOD    --> trust and
> scram-sha-256 overall.

What are the settings in pg_hba.conf in the production setup?

>
> Many thanks in advance
> Best Regards
> Nikola Lubenov
>
>
>

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com