From: Scott Marlowe <scott.marlowe@gmail.com>
To: Rafael Domiciano <rafael.domiciano@gmail.com>
Cc: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: Postgres User Can Login without a password
Date: Thu, 31 Jul 2008 19:39:59 -0600
Message-ID: <dcc563d10807311839y1d127bc0g203b8b57be986cce@mail.gmail.com> (raw)
In-Reply-To: <3a0028490807311208m687e37d5k11c7e72bfc1da5d@mail.gmail.com>
References: <3a0028490807311208m687e37d5k11c7e72bfc1da5d@mail.gmail.com>
On Thu, Jul 31, 2008 at 1:08 PM, Rafael Domiciano
<rafael.domiciano@gmail.com> wrote:
> Hi there,
>
> I have a situation that is a bit strange.
> I discovered today that I can login in programs like EMS SQL Manager and in
> the internal software (via ODBC) without using the password for the user.
>
> Example:
> Configuration on the ODBC:
> datasource: postgres
> database: Postgres
> server: "IP"
> user: 123456
> password: 123456
>
> The software connect to the ODBC getting the configs of the data source.
> And when I clear the password in the ODBC the software continues to work,
> without a passwd error.
> I certified with the programers, and the software doesn't pass the password.
You're likely logging in from the same machine and pg_hba.conf is set
to ident authentication.
Change your pg_hba.conf back to ident or trust, and run this command:
alter user postgres set password='password';
changing 'password' of course
Then change pg_hba.conf to md5 authentication.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: scott.marlowe@gmail.com, rafael.domiciano@gmail.com
Subject: Re: Postgres User Can Login without a password
In-Reply-To: <dcc563d10807311839y1d127bc0g203b8b57be986cce@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox