Re: How to mask password when using ALTER USER syntax in psql.

From: Lewis Kapell <lkapell(at)setonhome(dot)org>
To: kenneth(dot)banyas-1(at)nasa(dot)gov
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: How to mask password when using ALTER USER syntax in psql.
Date: 2009-09-10 18:34:30
Message-ID: 4AA946B6.6060608@setonhome.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

The documentation for 8.3 states:

ALTER USER is now an alias for ALTER ROLE.

Under the entry for ALTER ROLE it says:

Caution must be exercised when specifying an unencrypted password with
this command. The password will be transmitted to the server in
cleartext, and it might also be logged in the client's command history
or the server log. psql contains a command \password that can be used
to safely change a role's password.

Kenneth Banyas wrote:
> Greetings,
>
> I am using versions 7.4 and 8.3.7.
> I have not discovered a way to obfuscate the password when changing it
> in psql with ALTER USER syntax.
> The password displays in clear text at the command line AND in the log file.
> Why is this?
> Or am I missing something obvious in the documentation?
> Thanks.
>
> Ken Banyas
>
>

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Tom Lane 2009-09-10 19:03:28 Re: How to mask password when using ALTER USER syntax in psql.
Previous Message Kenneth Banyas 2009-09-10 17:48:56 How to mask password when using ALTER USER syntax in psql.