Re: MD5 Authentication

From: Rafael Martinez <r(dot)m(dot)guerrero(at)usit(dot)uio(dot)no>
To: Raimon Fernandez <coder(at)montx(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: MD5 Authentication
Date: 2009-11-05 15:49:40
Message-ID: 4AF2F414.3000502@usit.uio.no
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Raimon Fernandez wrote:
> Hello again ...
>
>
> I'm trying to Authenticate to some PostgreSQL using MD5.
>
> I can get the salt, for example:
>
> A7 2E DB 2F
>

Hello

The md5 authentication in PostgreSQL works this way:

server -------------- 4-byte token ---------------------------> client
server <--- "md5" + md5(md5(password + username) + token)" ---- client

regards
- --
Rafael Martinez, <r(dot)m(dot)guerrero(at)usit(dot)uio(dot)no>
Center for Information Technology Services
University of Oslo, Norway

PGP Public Key: http://folk.uio.no/rafael/

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Sam Mason 2009-11-05 15:50:02 Re: pg_dump native format will not restore correctly
Previous Message Sam Mason 2009-11-05 15:45:59 Re: MD5 Authentication