Re: md5 again

From: Vince Vielhaber <vev(at)michvhf(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>, pgsql-hackers(at)postgreSQL(dot)org
Subject: Re: md5 again
Date: 2000-07-11 16:44:18
Message-ID: Pine.BSF.4.21.0007111241110.97059-100000@paprika.michvhf.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Tue, 11 Jul 2000, Tom Lane wrote:

> Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> > MD5(MD5(username+user_salt)+random_salt)
>
> > Postmaster takes its pg_shadow MD5(username+user_salt) and does another
> > MD5 with the random salt and compares it with what was sent from the
> > client.
>
> Doesn't seem quite right ... where's the password?

I had assumed Bruce was referring to the password with user_salt.

Vince.
--
==========================================================================
Vince Vielhaber -- KA8CSH email: vev(at)michvhf(dot)com http://www.pop4.net
128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
Online Campground Directory http://www.camping-usa.com
Online Giftshop Superstore http://www.cloudninegifts.com
==========================================================================

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Vince Vielhaber 2000-07-11 16:49:32 Re: md5 again
Previous Message Jan Wieck 2000-07-11 16:41:39 Re: AW: Storage Manager (was postgres 7.2 features.)