X-Original-To: pgsql-general-postgresql.org@localhost.postgresql.org Received: from localhost (unknown [200.46.204.144]) by svr1.postgresql.org (Postfix) with ESMTP id EF3305288D; Mon, 13 Jun 2005 19:33:54 -0300 (ADT) Received: from svr1.postgresql.org ([200.46.204.71]) by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024) with ESMTP id 47681-09; Mon, 13 Jun 2005 22:33:49 +0000 (GMT) Received: from ls405.htnet.hr (ls405.htnet.hr [195.29.150.97]) by svr1.postgresql.org (Postfix) with ESMTP id E288852899; Mon, 13 Jun 2005 19:33:47 -0300 (ADT) Received: from ls401.t-com.hr (ls401.t-com.hr [195.29.150.236]) by ls405.htnet.hr (0.0.0/8.12.10) with ESMTP id j5DMXkmZ001136; Tue, 14 Jun 2005 00:33:46 +0200 Received: from ls401.t-com.hr (localhost.localdomain [127.0.0.1]) by ls401.t-com.hr (Qmlai) with ESMTP id 01541B8007; Tue, 14 Jun 2005 00:33:46 +0200 (CEST) Received: from zlatkovyfkpgz6 (ao3-m69.net.t-com.hr [195.29.34.69]) by ls401.t-com.hr (Qmlai) with SMTP id BB27CF8005; Tue, 14 Jun 2005 00:33:44 +0200 (CEST) Message-ID: <000001c57067$f6a22110$45221dc3@zlatkovyfkpgz6> From: =?iso-8859-2?Q?Zlatko_Mati=E6?= To: "Volkan YAZICI" Cc: , References: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6> <7104a737050612234734ffc2a5@mail.gmail.com> Subject: Re: [INTERFACES] retrieving information about password from MS Access front-end Date: Mon, 13 Jun 2005 14:34:52 +0200 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-2"; reply-type=original Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-Virus-Scanned: by amavisd-new at hub.org X-Spam-Status: No, hits=0.216 tagged_above=0 required=5 tests=AWL, DATE_IN_PAST_06_12 X-Spam-Level: X-Archive-Number: 200506/650 X-Sequence-Number: 79358 Thanks. ----- Original Message ----- From: "Volkan YAZICI" To: "Zlatko Matiæ" Cc: ; Sent: Monday, June 13, 2005 8:47 AM Subject: Re: [GENERAL] [INTERFACES] retrieving information about password from MS Access front-end > Hi, > > On 6/13/05, Zlatko Matiæ wrote: >> I want to create VBA procedure that compares value in text box with >> actual >> password to determine if it is the same. As the password is encrypted >> (md5) >> I can't read it from pg_shaddow system table. How to retrieve decrypted >> value from pg_shaddow? > > It's (practically) impossible to decrypt a MD5 hashed password. > >> Or at least, how to transfer value from text-box (MS Access) to Postgres >> so that Postgres can determine whether those two values >> are the same ? > > You need to MD5 hash the input passsword and compare hashed input > password with the one in pg_shadow. For instance: > > -- $1 for password input. > SELECT usernm FROM recs WHERE passwd = md5($1) > > Furthermore, it'll bring some potential security problems to be able > to access pg_shadow which requires db admin permissions. > > Regards. > > ---------------------------(end of broadcast)--------------------------- > TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org >