Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1ab2Os-00047G-MI for pgsql-hackers@arkaria.postgresql.org; Wed, 02 Mar 2016 08:44:54 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84) (envelope-from ) id 1ab2Os-00089U-99 for pgsql-hackers@arkaria.postgresql.org; Wed, 02 Mar 2016 08:44:54 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84) (envelope-from ) id 1ab2NW-0006Sk-P4 for pgsql-hackers@postgresql.org; Wed, 02 Mar 2016 08:43:30 +0000 Received: from newmail.postgrespro.ru ([93.174.131.138] helo=mail.postgrespro.ru) by makus.postgresql.org with esmtp (Exim 4.84) (envelope-from ) id 1ab2NT-0001sB-Qf for pgsql-hackers@postgresql.org; Wed, 02 Mar 2016 08:43:29 +0000 Received: from localhost (localhost [127.0.0.1]) by mail.postgrespro.ru (Postfix) with ESMTP id 78D6E21C680E; Wed, 2 Mar 2016 11:43:25 +0300 (MSK) Received: from mail.postgrespro.ru ([127.0.0.1]) by localhost (mail.postgrespro.ru [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xEwwKqC4NEWb; Wed, 2 Mar 2016 11:43:23 +0300 (MSK) Received: from [192.168.27.123] (unknown [192.168.27.1]) by mail.postgrespro.ru (Postfix) with ESMTPSA id 2B35C21C675D; Wed, 2 Mar 2016 11:43:23 +0300 (MSK) Subject: Re: [REVIEW]: Password identifiers, protocol aging and SCRAM protocol To: Michael Paquier , Dmitry Dolgov <9erthalion6@gmail.com> References: <56CF2DEA.8070204@postgrespro.ru> <56D06C67.8050306@postgrespro.ru> <56D42ECF.2060501@postgrespro.ru> Cc: PostgreSQL mailing lists From: Valery Popov Message-ID: <56D6A7AB.50306@postgrespro.ru> Date: Wed, 2 Mar 2016 11:43:23 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org >> >> db_user_namespace causes the client's and >> server's user name representation to differ. >> Authentication checks are always done with the server's user name >> so authentication methods must be configured for the >> server's user name, not the client's. Because >> md5 uses the user name as salt on both the >> client and server, md5 cannot be used with >> db_user_namespace. >> Also in doc/src/sgml/ref/create_role.sgml is should be instead of PASSWORD VERIFIERS ( verifier_type = 'password' like this PASSWORD VERIFIERS ( verifier_type = 'password'-- Regards, Valery Popov Postgres Professional http://www.postgrespro.com The Russian Postgres Company -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers