MIME-Version: 1.0
References: 
 <CAFOhELcrv+Rm0bBmXt1-c8NOpsaxinKi=QQTn491dbcUo2xjZA@mail.gmail.com>
In-Reply-To: 
 <CAFOhELcrv+Rm0bBmXt1-c8NOpsaxinKi=QQTn491dbcUo2xjZA@mail.gmail.com>
From: Akshay Joshi <akshay.joshi@enterprisedb.com>
Date: Mon, 11 Apr 2022 13:49:49 +0530
Message-ID: 
 <CANxoLDf_X=dbuhgoyiHNDNEXJB+bMJCDWME5HyYwthbkR1eyKg@mail.gmail.com>
Subject: Re: [pgAdmin4][Patch]- Feature #7012 - disable master password
 requirement when using alternative auth source
To: Khushboo Vashi <khushboo.vashi@enterprisedb.com>
Cc: pgadmin-hackers <pgadmin-hackers@postgresql.org>
Content-Type: multipart/alternative; boundary="00000000000045ec0905dc5c9c66"
Archived-At: 
 <https://www.postgresql.org/message-id/CANxoLDf_X%3DdbuhgoyiHNDNEXJB%2BbMJCDWME5HyYwthbkR1eyKg%40mail.gmail.com>
Precedence: bulk

--00000000000045ec0905dc5c9c66
Content-Type: text/plain; charset="UTF-8"

Thanks, the patch applied.

On Mon, Apr 11, 2022 at 12:00 PM Khushboo Vashi <
khushboo.vashi@enterprisedb.com> wrote:

> Hi,
>
> Please find the attached patch to implement the feature #7012 - Disable
> master password requirement when using alternative auth source
>
> When pgAdmin stores a connection password, it encrypts it using a key that
> is formed either from the master password, or from the pgAdmin login
> password for the user. In the case of auth methods such as OAuth, Kerberos
> or Webserver, pgAdmin doesn't have access to anything long-lived to form
> the encryption key from, hence it uses the master password. And if the
> master is disabled, there is no way to store the connection password.
>
> To resolve this, we have added an option to config.py (which defaults to
> None) for an alternate encryption key. pgAdmin would use this if a) the
> master password is disabled AND b) there is no suitable key/password
> available from the auth module for the user. If the option is set to
> None, pgAdmin works as it does now.
>
> Thanks,
> Khushboo
>


-- 
*Thanks & Regards*
*Akshay Joshi*
*pgAdmin Hacker | Principal Software Architect*
*EDB Postgres <http://edbpostgres.com>*

*Mobile: +91 976-788-8246*

--00000000000045ec0905dc5c9c66
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Thanks, the patch applied.</div></div><br><div class=
=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, Apr 11, 2022=
 at 12:00 PM Khushboo Vashi &lt;<a href=3D"mailto:khushboo.vashi@enterprise=
db.com">khushboo.vashi@enterprisedb.com</a>&gt; wrote:<br></div><blockquote=
 class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px so=
lid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><font color=3D"#000=
000" face=3D"verdana, sans-serif">Hi,</font><div><font color=3D"#000000" fa=
ce=3D"verdana, sans-serif"><br></font></div><div><font face=3D"verdana, san=
s-serif" color=3D"#000000">Please find the attached patch to implement the =
feature #7012 - Disable master password requirement when using alternative =
auth source</font></div><div><p><font face=3D"verdana, sans-serif" color=3D=
"#000000">When pgAdmin stores a connection password, it encrypts it using a=
 key that is formed either from the master password, or from the pgAdmin lo=
gin password for the user. In the case of auth methods such as OAuth, Kerbe=
ros or Webserver, pgAdmin doesn&#39;t have access to anything long-lived to=
 form the encryption key from, hence it uses the master password. And if th=
e master is disabled, there is no way to store the connection password.</fo=
nt></p><p><font face=3D"verdana, sans-serif" color=3D"#000000">To resolve t=
his, we have added an option to config.py (which defaults to None) for an a=
lternate encryption key. pgAdmin would use this if a) the master password i=
s disabled AND b) there is no suitable key/password available from the auth=
 module for the user.=C2=A0</font><span style=3D"color:rgb(0,0,0);font-fami=
ly:verdana,sans-serif">If the option is set to None, pgAdmin works as it do=
es now.=C2=A0</span></p></div><div><font face=3D"verdana, sans-serif" color=
=3D"#000000"><br></font></div><div><font face=3D"verdana, sans-serif" color=
=3D"#000000">Thanks,</font></div><div><font face=3D"verdana, sans-serif" co=
lor=3D"#000000">Khushboo</font></div></div>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"lt=
r"><div dir=3D"ltr"><div dir=3D"ltr"><div><font color=3D"#3333FF"><b><span =
style=3D"color:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px;borde=
r-collapse:collapse">Thanks &amp; Regards</span></b></font></div><div><font=
 color=3D"#3333FF"><b><span style=3D"color:rgb(0,0,0);font-family:arial,san=
s-serif;font-size:13px;border-collapse:collapse">Akshay Joshi</span></b></f=
ont></div><div><font color=3D"#3333FF"><b><span style=3D"color:rgb(0,0,0);f=
ont-family:arial,sans-serif;font-size:13px;border-collapse:collapse">pgAdmi=
n Hacker | Principal Software Architect</span></b></font></div><font color=
=3D"#000000" face=3D"arial, sans-serif"><b><a href=3D"http://edbpostgres.co=
m" target=3D"_blank">EDB Postgres</a></b></font><br><div><b style=3D"color:=
rgb(51,51,255)"><span style=3D"color:rgb(0,0,0);font-family:arial,sans-seri=
f;font-size:13px;border-collapse:collapse">Mobile: +91 976-788-8246<br></sp=
an></b><br></div></div></div></div></div></div></div>

--00000000000045ec0905dc5c9c66--