Re: Password authorization

Am 20.01.22 um 12:11 schrieb Daulat:
> Hi Holger,
>
> Is there any change related to password management in Postgres14 with
> respect to previous releases. I don't see anything new.
>
> Thanks
>
> On Thu, Jan 20, 2022 at 3:36 PM Holger Jakobs <holger(at)jakobs(dot)com> wrote:
>
> Am 20.01.22 um 10:56 schrieb Daulat:
> > Hi Team,
> >
> > Do we have any facility for password authorisation in Postgres
> same as
> > in Oracle?
> > In Oracle, a user can change their password based upon the
> > profile setting. What about in Postgres ?
> >
> > Is there any alternative in postgres to manage the user password
> > authorisation?
> > What about LDAP with respect to this approach?
> > Please suggest.
> >
> > Thanks.
> >
> >
>
> https://www.postgresql.org/docs/14/sql-alterrole.html contains the
> sentence:
>
>      Ordinary roles can only change their own password.
>
>
>

Yes, there is. The default password hashing method has changed in
postgresql.conf:

Version 13:
#password_encryption = md5        # md5 or scram-sha-256

Version 14:
#password_encryption = scram-sha-256    # scram-sha-256 or md5

--
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012