pg.ddx.io pgsql-admin@postgresql.org mailing list archivehelp / color / mirror / Atom feed
password problems 2+ messages / 2 participants [nested] [flat]
* password problems @ 2011-10-07 14:14 Alexander James Spence [axs] <axs@aber.ac.uk> 2011-10-08 04:50 ` Re: password problems Craig Ringer <ringerc@ringerc.id.au> 0 siblings, 1 reply; 2+ messages in thread From: Alexander James Spence [axs] @ 2011-10-07 14:14 UTC (permalink / raw) To: pgsql-admin Hi All, We have updated our server to 9.1 the previous version used am external file for authentication (unix crypt), questions: Can I continue to use this file if so how is it referenced in pg_hba.conf? If I want to continue to use unix crypt passwords how do I get them into the database. I have seen references to crypt and gen_salt but cannot get these to work. Regards, Sandy Spence Department of Computer Science Aberystwyth University Penglais Campus Llandinam Building Aberystwyth Ceredigion SY23 3DB Tel: 01970-622433 Fax: 01970-628536 ^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: password problems 2011-10-07 14:14 password problems Alexander James Spence [axs] <axs@aber.ac.uk> @ 2011-10-08 04:50 ` Craig Ringer <ringerc@ringerc.id.au> 0 siblings, 0 replies; 2+ messages in thread From: Craig Ringer @ 2011-10-08 04:50 UTC (permalink / raw) To: Alexander James Spence [axs] <axs@aber.ac.uk>; +Cc: pgsql-admin On 10/07/2011 10:14 PM, Alexander James Spence [axs] wrote: > We have updated our server to 9.1 the previous version used am external > file for authentication (unix crypt) PostgreSQL's basic auth scheme hasn't changed in a long time, so it's pretty unlikely that the previous version inherently used an external file for auth. Is it possible the previous version was _configured_ to, via pg_hba.conf ? If not: Which previous version, exactly? On what OS and (if linux) distro? What was the external file called, where was it and what is its format? Are you talking about /etc/passwd or something else? Is it possible you were authenticating via OS usernames and passwords before, by using the pluggable authentication modules (PAM) subsystem in your OS via pg_hba.conf? > Can I continue to use this file if so how is it referenced in pg_hba.conf? Alas, my psychic powers are insufficient to answer this question. Perhaps if you said something about what the file is and where it is... See the manual: http://www.postgresql.org/docs/current/static/auth-pg-hba-conf.html for more info on pg_hba.conf, in particular the auth-method section and the elaboraton of it given in this manual page, which the pg_hba.conf page links to: http://www.postgresql.org/docs/current/static/auth-methods.html > If I want to continue to use unix crypt passwords how do I get them into > the database. I have seen references to crypt and gen_salt but cannot > get these to work. Do you refer to pgcrypto? (Tip: If you refer to something, link to it so others know for certain what you're talking about). http://www.postgresql.org/docs/current/interactive/pgcrypto.html If so: that's for application-level crypto work, when your app wants to do crypto in the database. For database user authentication you probably want ALTER USER: http://www.postgresql.org/docs/current/interactive/sql-alteruser.html As far as I know, PostgreSQL's default built-in user database uses a salted md5 hash for user passwords. This will prevent you from copying existing `crypt'ed passwords over directly into PostgreSQL's internal user list, as it's a different hash algorithm. You should still be able to use other auth methods like PAM to use them, though. -- Craig Ringer ^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2011-10-08 04:50 UTC | newest] Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2011-10-07 14:14 password problems Alexander James Spence [axs] <axs@aber.ac.uk> 2011-10-08 04:50 ` Craig Ringer <ringerc@ringerc.id.au>
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox