Re: MD5 Authentication

On 05/11/2009, at 18:02, Rafael Martinez wrote:

> Raimon Fernandez wrote:
>>
>> On 05/11/2009, at 16:49, Rafael Martinez wrote:
>>
>>>
>>> The md5 authentication in PostgreSQL works this way:
>>>
>>> server -------------- 4-byte token --------------------------->
>>> client
>>> server <--- "md5" + md5(md5(password + username) + token) ----
>>> client
>>
>> Where did gou get this ?
>>
>> I can't find it in the docs ...
>>
>
>
> From an e-mail from Tom Lane about this:
> http://archives.postgresql.org/pgsql-novice/2003-05/msg00305.php

ok, thanks ...

what's not clear to me if:

for example:

user: postgre
psw: postgres

salt: 1234

first md5: md5("postgrepostgres") ==> 44965a835f81ec252d83961d2cc9f3e1

second: md5("44965a835f81ec252d83961d2cc9f3e1"+&H01+&H02+&H03+&H04)
==> 85c0fde09d577cce6286869467f9f50e

send "md585c0fde09d577cce6286869467f9f50e" as a psw

this is not working for me ...

yet ...

:-)

thanks,

raimon

> regards,
> --
> Rafael Martinez, <r(dot)m(dot)guerrero(at)usit(dot)uio(dot)no>
> Center for Information Technology Services
> University of Oslo, Norway
>
> PGP Public Key: http://folk.uio.no/rafael/
>
>
>
>
>
>
> --
> Sent via pgsql-general mailing list (pgsql-general(at)postgresql(dot)org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-general
>