Re: BUG #7984: passwordcheck module not enforced in PGAdmin GUI

From: Dave Page <dpage(at)pgadmin(dot)org>
To: pmahalwar(at)intertrust(dot)com
Cc: Pg Bugs <pgsql-bugs(at)postgresql(dot)org>
Subject: Re: BUG #7984: passwordcheck module not enforced in PGAdmin GUI
Date: 2013-03-23 11:53:45
Message-ID: CA+OCxoxuGHo_wOJ1Hj8yNy=xA4jUV-EvZ2-XRB3Sr3iXgpEyEw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

On Fri, Mar 22, 2013 at 8:23 PM, <pmahalwar(at)intertrust(dot)com> wrote:
> The following bug has been logged on the website:
>
> Bug reference: 7984
> Logged by: passwordcheck module is not enforced by PGAdmin GUI
> Email address: pmahalwar(at)intertrust(dot)com
> PostgreSQL version: 9.1.0
> Operating system: Windows
> Description:
>
> Hi,
>
> We've enabled the Postgres passwordcheck modules by following instructions
> as mentioned on
> http://www.postgresql.org/docs/9.1/static/passwordcheck.html

Did you read the large "Caution" box on that page?

> Now we find that this password strength check is only enforced in command
> line mode. PGAdmin still accepts the weak password. Please fix.

We're not going to modify pgAdmin to send plain-text passwords over the wire.

--
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake

EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message News Subsystem 2013-03-23 14:22:44
Previous Message Dave Page 2013-03-23 11:51:18 Re: BUG #7983: Problem with pgAgent.