pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedpostgresql 8.3 logging user passwords in clear text
5+ messages / 4 participants
[nested] [flat]
* postgresql 8.3 logging user passwords in clear text
@ 2010-08-23 23:47 Keith Pinnix <kpinnix@yahoo.com>
2010-08-24 06:36 ` Re: postgresql 8.3 logging user passwords in clear text Scott Marlowe <scott.marlowe@gmail.com>
2010-08-24 17:04 ` Re: postgresql 8.3 logging user passwords in clear text Alvaro Herrera <alvherre@commandprompt.com>
0 siblings, 2 replies; 5+ messages in thread
From: Keith Pinnix @ 2010-08-23 23:47 UTC (permalink / raw)
To: pgsql-admin
All:
I have a postgresql instance and I have noticed that it is logging the user
passwords in clear text in the postgresql.log. Is this configurable so that it
retains the user info and commands but does not log the password?
Keith
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: postgresql 8.3 logging user passwords in clear text
2010-08-23 23:47 postgresql 8.3 logging user passwords in clear text Keith Pinnix <kpinnix@yahoo.com>
@ 2010-08-24 06:36 ` Scott Marlowe <scott.marlowe@gmail.com>
2010-08-24 19:01 ` Re: postgresql 8.3 logging user passwords in clear text Scott Marlowe <scott.marlowe@gmail.com>
1 sibling, 1 reply; 5+ messages in thread
From: Scott Marlowe @ 2010-08-24 06:36 UTC (permalink / raw)
To: Keith Pinnix <kpinnix@yahoo.com>; +Cc: pgsql-admin
On Mon, Aug 23, 2010 at 5:47 PM, Keith Pinnix <kpinnix@yahoo.com> wrote:
> All:
>
> I have a postgresql instance and I have noticed that it is logging the user
> passwords in clear text in the postgresql.log. Is this configurable so
> that it retains the user info and commands but does not log the password?
Got some redacted log examples?
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: postgresql 8.3 logging user passwords in clear text
2010-08-23 23:47 postgresql 8.3 logging user passwords in clear text Keith Pinnix <kpinnix@yahoo.com>
2010-08-24 06:36 ` Re: postgresql 8.3 logging user passwords in clear text Scott Marlowe <scott.marlowe@gmail.com>
@ 2010-08-24 19:01 ` Scott Marlowe <scott.marlowe@gmail.com>
2010-08-24 19:40 ` Re: postgresql 8.3 logging user passwords in clear text Tom Lane <tgl@sss.pgh.pa.us>
0 siblings, 1 reply; 5+ messages in thread
From: Scott Marlowe @ 2010-08-24 19:01 UTC (permalink / raw)
To: Keith Pinnix <kpinnix@yahoo.com>; pgsql-admin
On Tue, Aug 24, 2010 at 12:20 PM, Keith Pinnix <kpinnix@yahoo.com> wrote:
> Scott:
>
> The entries are from dblimk something like below:
>
> SELECT * FROM dblink('dbname=XXXXXX host=XXXXXX port=XXX user=XXXXX
> password=XXXXXXX ',
>
> We use this feature quite a bit and this presents quite a security issue.
> We are currently using 8.3.
You could set up those machines to connect via trust. But yeah,
dblink otherwise has passwords in the connect string.
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: postgresql 8.3 logging user passwords in clear text
2010-08-23 23:47 postgresql 8.3 logging user passwords in clear text Keith Pinnix <kpinnix@yahoo.com>
2010-08-24 06:36 ` Re: postgresql 8.3 logging user passwords in clear text Scott Marlowe <scott.marlowe@gmail.com>
2010-08-24 19:01 ` Re: postgresql 8.3 logging user passwords in clear text Scott Marlowe <scott.marlowe@gmail.com>
@ 2010-08-24 19:40 ` Tom Lane <tgl@sss.pgh.pa.us>
0 siblings, 0 replies; 5+ messages in thread
From: Tom Lane @ 2010-08-24 19:40 UTC (permalink / raw)
To: Scott Marlowe <scott.marlowe@gmail.com>; +Cc: Keith Pinnix <kpinnix@yahoo.com>; pgsql-admin
Scott Marlowe <scott.marlowe@gmail.com> writes:
> On Tue, Aug 24, 2010 at 12:20 PM, Keith Pinnix <kpinnix@yahoo.com> wrote:
>> The entries are from dblimk something like below:
>> SELECT * FROM dblink('dbname=XXXXXX host=XXXXXX port=XXX user=XXXXX
>> password=XXXXXXX ',
> You could set up those machines to connect via trust. But yeah,
> dblink otherwise has passwords in the connect string.
Actually, the general opinion on this is that the postmaster log files
have to be protected because they might contain sensitive data;
*especially* so if you're enabling log_statements, but even without
that. dblink passwords are just one small manifestation of the general
problem. As an example, you might be inserting customers' credit card
numbers or some such into your tables. Even if the log_statement
mechanism understood that it should hide passwords, it's hardly likely
to know that specific bits of ordinary data have security implications.
IOW: you're trying to fix this in the wrong place. Secure your
logfiles, don't imagine that you can prevent there being any sensitive
info in them.
regards, tom lane
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: postgresql 8.3 logging user passwords in clear text
2010-08-23 23:47 postgresql 8.3 logging user passwords in clear text Keith Pinnix <kpinnix@yahoo.com>
@ 2010-08-24 17:04 ` Alvaro Herrera <alvherre@commandprompt.com>
1 sibling, 0 replies; 5+ messages in thread
From: Alvaro Herrera @ 2010-08-24 17:04 UTC (permalink / raw)
To: Keith Pinnix <kpinnix@yahoo.com>; +Cc: pgsql-admin
Excerpts from Keith Pinnix's message of lun ago 23 19:47:53 -0400 2010:
> All:
>
> I have a postgresql instance and I have noticed that it is logging the user
> passwords in clear text in the postgresql.log. Is this configurable so that it
> retains the user info and commands but does not log the password?
In what context? If you're doing ALTER ROLE / PASSWORD with the
password in clear text, then that's obviously going to show up in the
log. The solution is to encrypt them client-side; for example use
\password in psql to change passwords, which does that automatically.
--
Álvaro Herrera <alvherre@commandprompt.com>
The PostgreSQL Company - Command Prompt, Inc.
PostgreSQL Replication, Consulting, Custom Development, 24x7 support
^ permalink raw reply [nested|flat] 5+ messages in thread
end of thread, other threads:[~2010-08-24 19:40 UTC | newest]
Thread overview: 5+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2010-08-23 23:47 postgresql 8.3 logging user passwords in clear text Keith Pinnix <kpinnix@yahoo.com>
2010-08-24 06:36 ` Re: postgresql 8.3 logging user passwords in clear text Scott Marlowe <scott.marlowe@gmail.com>
2010-08-24 19:01 ` Re: postgresql 8.3 logging user passwords in clear text Scott Marlowe <scott.marlowe@gmail.com>
2010-08-24 19:40 ` Re: postgresql 8.3 logging user passwords in clear text Tom Lane <tgl@sss.pgh.pa.us>
2010-08-24 17:04 ` Re: postgresql 8.3 logging user passwords in clear text Alvaro Herrera <alvherre@commandprompt.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox