pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedPostgres User Can Login without a password
2+ messages / 2 participants
[nested] [flat]
* Postgres User Can Login without a password
@ 2008-07-31 19:08 Rafael Domiciano <rafael.domiciano@gmail.com>
2008-08-01 01:39 ` Re: Postgres User Can Login without a password Scott Marlowe <scott.marlowe@gmail.com>
0 siblings, 1 reply; 2+ messages in thread
From: Rafael Domiciano @ 2008-07-31 19:08 UTC (permalink / raw)
To: pgsql-admin
Hi there,
I have a situation that is a bit strange.
I discovered today that I can login in programs like EMS SQL Manager and in
the internal software (via ODBC) without using the password for the user.
Example:
Configuration on the ODBC:
datasource: postgres
database: Postgres
server: "IP"
user: 123456
password: 123456
The software connect to the ODBC getting the configs of the data source.
And when I clear the password in the ODBC the software continues to work,
without a passwd error.
I certified with the programers, and the software doesn't pass the password.
So, reading a little bit, I discovered that possibly my pg_hba.conf is
wrong.
I tried to change the "auth-method", but or I couldn't connect to the base
(if I pass the user and the passwd) or I connected without the passwd.
If someone get a ideia of what to do in this case, would be greatful.
Tnhks all,
Rafael
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: Postgres User Can Login without a password
2008-07-31 19:08 Postgres User Can Login without a password Rafael Domiciano <rafael.domiciano@gmail.com>
@ 2008-08-01 01:39 ` Scott Marlowe <scott.marlowe@gmail.com>
0 siblings, 0 replies; 2+ messages in thread
From: Scott Marlowe @ 2008-08-01 01:39 UTC (permalink / raw)
To: Rafael Domiciano <rafael.domiciano@gmail.com>; +Cc: pgsql-admin
On Thu, Jul 31, 2008 at 1:08 PM, Rafael Domiciano
<rafael.domiciano@gmail.com> wrote:
> Hi there,
>
> I have a situation that is a bit strange.
> I discovered today that I can login in programs like EMS SQL Manager and in
> the internal software (via ODBC) without using the password for the user.
>
> Example:
> Configuration on the ODBC:
> datasource: postgres
> database: Postgres
> server: "IP"
> user: 123456
> password: 123456
>
> The software connect to the ODBC getting the configs of the data source.
> And when I clear the password in the ODBC the software continues to work,
> without a passwd error.
> I certified with the programers, and the software doesn't pass the password.
You're likely logging in from the same machine and pg_hba.conf is set
to ident authentication.
Change your pg_hba.conf back to ident or trust, and run this command:
alter user postgres set password='password';
changing 'password' of course
Then change pg_hba.conf to md5 authentication.
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2008-08-01 01:39 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2008-07-31 19:08 Postgres User Can Login without a password Rafael Domiciano <rafael.domiciano@gmail.com>
2008-08-01 01:39 ` Scott Marlowe <scott.marlowe@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox