From: Tom Lane <tgl@sss.pgh.pa.us>
To: Richard Hodges <rh@matriplex.com>
Cc: pgsql-docs@postgresql.org
Subject: Re: Differences in crypt hash?
Date: Sat, 04 Aug 2001 13:05:02 -0400
Message-ID: <29263.996944702@sss.pgh.pa.us> (raw)
In-Reply-To: <Pine.BSF.4.10.10108031827060.96346-100000@mail.matriplex.com>
References: <Pine.BSF.4.10.10108031827060.96346-100000@mail.matriplex.com>
Richard Hodges <rh@matriplex.com> writes:
> The problem is that my Solaris client does not authenticate against
> my server (7.0.3 built on FreeBSD).
Indeed, one of the nasty things about the 'crypt' authentication method
is that it assumes the crypt() library call acts the same on both client
and server machine. As you've just discovered, that ain't always so.
There have been plans for some time to supersede our present password
auth methods with something more secure and portable (probably MD5
double hashing at both ends). I think Vince V. is working on that,
but I've not heard anything about it lately. You can read all about it
in the pghackers mail archives if you care.
In the meantime, you'll just have to use a different auth method.
Plain "password" would work. (If you're concerned about someone
sniffing your TCP connection, consider using SSL.)
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: tgl@sss.pgh.pa.us, rh@matriplex.com
Subject: Re: Differences in crypt hash?
In-Reply-To: <29263.996944702@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox