From: Stephen Frost <sfrost@snowman.net>
To: Scott Marlowe <scott.marlowe@gmail.com>
Cc: Don Seiler <don@seiler.us>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: Passwords in clear text in server log
Date: Wed, 11 Oct 2017 11:47:49 -0400
Message-ID: <20171011154748.GM4628@tamriel.snowman.net> (raw)
In-Reply-To: <CAOR=d=0-vy+W=FrcHxd7dCX=Nob-VqkB-=Gmz+QxYriCuqJUTg@mail.gmail.com>
References: <CAHJZqBDe1-oiYtdh5pcWLAhr3jsDMFQg4miv3PYADH3YWKqZ2w@mail.gmail.com>
<9072.1507733313@sss.pgh.pa.us>
<CAHJZqBAtBvHuMh5mF66hj-P9sb4hhps1Nv7aR-iZG-90SS8_0Q@mail.gmail.com>
<CAOR=d=0-vy+W=FrcHxd7dCX=Nob-VqkB-=Gmz+QxYriCuqJUTg@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Scott, Don, all,
* Scott Marlowe (scott.marlowe@gmail.com) wrote:
> FYI our standard hack here is to run
>
> set log_statement='none';
> alter user ...
That's pretty terrible, frankly.
> I do agree it would be nice to have postgres stamp out the password
> field with *** when logging though
The right approach is to use SCRAM and the exported libpq functions for
generating a proper verifier that is then passed to ALTER USER, just
like \password does in psql.
Of course, SCRAM is only in v10. The old md5 method has other issues
beyond this. Better than all of the above is to use either Kerberos or
client-side certificates.
Thanks!
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: sfrost@snowman.net, scott.marlowe@gmail.com, don@seiler.us, tgl@sss.pgh.pa.us
Subject: Re: Passwords in clear text in server log
In-Reply-To: <20171011154748.GM4628@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox