From: Sébastien Hoorens <sebihoorens@gmail.com>
To: Michael Paquier <michael@paquier.xyz>
To: jkatz@postgresql.org
Cc: pgsql-docs@lists.postgresql.org
Subject: Re: scram-sha-256 authentication
Date: Sun, 10 Jan 2021 17:17:32 +0100
Message-ID: <336BF3D6-9B19-49F9-B687-927A47264BD4@gmail.com> (raw)
In-Reply-To: <X/UZGjUFo4BZWMdB@paquier.xyz>
References: <160977988728.3264.12890569380100648489@wrigleys.postgresql.org>
<0707a341-0c2e-3fe4-fe65-607bea83aced@postgresql.org>
<X/UZGjUFo4BZWMdB@paquier.xyz>
Hi Jonathan and Michael,
Thank you for the quick reply, I will ask my questions in community support areas from now on, my apologies.
Your answers were very helpful. I will use psql’s \password command to set the users’ passwords for me instead of trying to generate and set the encoded password myself. I tried out this solution with success.
Best regards,
Sébastien
> On 6 Jan 2021, at 02:57, Michael Paquier <michael@paquier.xyz> wrote:
>
> On Tue, Jan 05, 2021 at 09:12:58AM -0500, Jonathan S. Katz wrote:
>> I am not sure what your end goal is, but there are a few ways to create
>> the hashed SCRAM verifier:
>>
>> - Using the \password flag in "psql"
>> - Using one of the connection drivers that interfaces with libpq's
>> PQencryptPasswordConn function[2]
>> - Some driver's handle the password hashing independently
>
> Another thing to be careful about is the value of password_encryption
> in postgresql.conf. The default has been changed to scram-sha-256 in
> c7eab0e, meaning that this change will be available in Postgres 14~.
> But if your environment is using the default configuration of 11, that
> may be set to "md5".
> --
> Michael
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: sebihoorens@gmail.com, michael@paquier.xyz, jkatz@postgresql.org, pgsql-docs@lists.postgresql.org
Subject: Re: scram-sha-256 authentication
In-Reply-To: <336BF3D6-9B19-49F9-B687-927A47264BD4@gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox