pg.ddx.io pgsql-interfaces@postgresql.org mailing list archive
help / color / mirror / Atom feedretrieving information about password from MS Access front-end
4+ messages / 3 participants
[nested] [flat]
* retrieving information about password from MS Access front-end
@ 2005-06-12 21:12 =?iso-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
0 siblings, 2 replies; 4+ messages in thread
From: Zlatko Matić @ 2005-06-12 21:12 UTC (permalink / raw)
To: pgsql-general@postgresql.org; pgsql-interfaces
How could I retrieve information about actual user password, if md5 method is set in pg_hba.conf ?
I want to create VBA procedure that compares value in text box with actual password to determine if it is the same. As the password is encrypted (md5) I can't read it from pg_shaddow system table. How to retrieve decrypted value from pg_shaddow? Or at least, how to transfer value from text-box (MS Access) to Postgres so that Postgres can determine whether those two values are the same ?
Thanks in advance,
Zlatko
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: retrieving information about password from MS
@ 2005-06-12 21:52 Tino Wildenhain <tino@wildenhain.de>
parent: =?iso-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
1 sibling, 0 replies; 4+ messages in thread
From: Tino Wildenhain @ 2005-06-12 21:52 UTC (permalink / raw)
To: Zlatko Matić <zlatko.matic1@sb.t-com.hr>; +Cc: Postgresql-General <pgsql-general@postgresql.org>; pgsql-interfaces
Am Sonntag, den 12.06.2005, 23:12 +0200 schrieb Zlatko Matić:
> How could I retrieve information about actual user password, if md5
> method is set in pg_hba.conf ?
> I want to create VBA procedure that compares value in text box with
> actual password to determine if it is the same. As the password is
> encrypted (md5) I can't read it from pg_shaddow system table. How to
> retrieve decrypted value from pg_shaddow? Or at least, how to transfer
> value from text-box (MS Access) to Postgres so that Postgres can
> determine whether those two values are the same ?
You cant. md5 really is a hash, not encryption (there is no decryption)
You would just try to connect - postgres will tell you if the password
is wrong.
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: [INTERFACES] retrieving information about password from MS Access front-end
@ 2005-06-13 06:47 Volkan YAZICI <volkan.yazici@gmail.com>
parent: =?iso-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
1 sibling, 1 reply; 4+ messages in thread
From: Volkan YAZICI @ 2005-06-13 06:47 UTC (permalink / raw)
To: Zlatko Matić <zlatko.matic1@sb.t-com.hr>; +Cc: pgsql-general@postgresql.org; pgsql-interfaces
Hi,
On 6/13/05, Zlatko Matić <zlatko.matic1@sb.t-com.hr> wrote:
> I want to create VBA procedure that compares value in text box with actual
> password to determine if it is the same. As the password is encrypted (md5)
> I can't read it from pg_shaddow system table. How to retrieve decrypted
> value from pg_shaddow?
It's (practically) impossible to decrypt a MD5 hashed password.
> Or at least, how to transfer value from text-box (MS Access) to Postgres
> so that Postgres can determine whether those two values
> are the same ?
You need to MD5 hash the input passsword and compare hashed input
password with the one in pg_shadow. For instance:
-- $1 for password input.
SELECT usernm FROM recs WHERE passwd = md5($1)
Furthermore, it'll bring some potential security problems to be able
to access pg_shadow which requires db admin permissions.
Regards.
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: [INTERFACES] retrieving information about password from MS Access front-end
@ 2005-06-13 12:34 =?iso-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
parent: Volkan YAZICI <volkan.yazici@gmail.com>
0 siblings, 0 replies; 4+ messages in thread
From: Zlatko Matić @ 2005-06-13 12:34 UTC (permalink / raw)
To: Volkan YAZICI <volkan.yazici@gmail.com>; +Cc: pgsql-general@postgresql.org; pgsql-interfaces
Thanks.
----- Original Message -----
From: "Volkan YAZICI" <volkan.yazici@gmail.com>
To: "Zlatko Matić" <zlatko.matic1@sb.t-com.hr>
Cc: <pgsql-general@postgresql.org>; <pgsql-interfaces@postgresql.org>
Sent: Monday, June 13, 2005 8:47 AM
Subject: Re: [GENERAL] [INTERFACES] retrieving information about password
from MS Access front-end
> Hi,
>
> On 6/13/05, Zlatko Matić <zlatko.matic1@sb.t-com.hr> wrote:
>> I want to create VBA procedure that compares value in text box with
>> actual
>> password to determine if it is the same. As the password is encrypted
>> (md5)
>> I can't read it from pg_shaddow system table. How to retrieve decrypted
>> value from pg_shaddow?
>
> It's (practically) impossible to decrypt a MD5 hashed password.
>
>> Or at least, how to transfer value from text-box (MS Access) to Postgres
>> so that Postgres can determine whether those two values
>> are the same ?
>
> You need to MD5 hash the input passsword and compare hashed input
> password with the one in pg_shadow. For instance:
>
> -- $1 for password input.
> SELECT usernm FROM recs WHERE passwd = md5($1)
>
> Furthermore, it'll bring some potential security problems to be able
> to access pg_shadow which requires db admin permissions.
>
> Regards.
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org
>
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2005-06-13 12:34 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2005-06-12 21:12 retrieving information about password from MS Access front-end =?iso-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
2005-06-12 21:52 ` Re: retrieving information about password from MS Tino Wildenhain <tino@wildenhain.de>
2005-06-13 06:47 ` Re: [INTERFACES] retrieving information about password from MS Access front-end Volkan YAZICI <volkan.yazici@gmail.com>
2005-06-13 12:34 ` Re: [INTERFACES] retrieving information about password from MS Access front-end =?iso-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox