Re: MD5 password storage - should be the same everywhere?

From: Francisco Reyes <lists(at)natserv(dot)net>
To: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>, pgsql-general(at)postgresql(dot)org
Subject: Re: MD5 password storage - should be the same everywhere?
Date: 2015-05-26 17:32:25
Message-ID: 5564AE29.9020203@natserv.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 05/25/2015 07:58 PM, Adrian Klaver wrote:
> On 05/25/2015 01:41 PM, Francisco Reyes wrote:
> I understood that is just a md5 hash of the password and the username
> with the string md5 pre-appended, so it should be the same.

Mistery solved..
Because I usually do "script" of most of my work for audits I was able
to track down what happened. Original request was to get data from
'machine 2', but it was later changed. Found something in the output of
my script that lead me to believe maybe the roles did not come from
'machine 2'.

Was able to find the source machine by using
select rolname, rolpassword,rolcanlogin from pg_catalog.pg_authid where
rolname = 'SomeUser';

Against machines I thought could have been the source and found a
matching one.

In response to

Browse pgsql-general by date

  From Date Subject
Next Message David Haynes II 2015-05-26 17:52:24 Fwd: Raster performance
Previous Message Melvin Davidson 2015-05-26 15:57:20 Re: Queries for unused/useless indexes