From: Alex Verstak <averstak@vt.edu>
To: pgsql-interfaces@postgresql.org
Subject: Re: ODBC and crypted passwords
Date: Sun, 09 Apr 2000 16:22:58 -0400
Message-ID: <200004092022.QAA09151@averstak.campus.vt.edu> (raw)
In-Reply-To: <9661.955301470@sss.pgh.pa.us>
Tom Lane wrote:
> Hmm. Can we find a freely-distributable version of libcrypt anywhere?
>
> (Actually, now that I think about it, I'm not entirely sure that crypt()
> implements exactly the same transformation on every Unix platform.
> It may be that you have to have a version of crypt() that matches the
> one on your server's platform. That would be a pain in the neck ...
> but if we did find an open-source libcrypt, maybe we could standardize
> on using it in preference to vendor crypts...)
I have no problem running the PostgreSQL server on Solaris and
using a FreeBSD client with crypt authentication. Both systems
use DES. Problems arise when systems try to work around the US
export restrictions and supply MD5 or other weak encryption.
For the same reason, you cannot make strong authentication code
available on your website. The best you can do is provide
a pointer to some DES implementation outside the US and instruct
users to download and use this one if their systems do not work
together. Another alternative is to include MD5 in the distribution,
but use the system crypt by default, with a configuration option
to switch to MD5.
=alex
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: averstak@vt.edu
Subject: Re: ODBC and crypted passwords
In-Reply-To: <200004092022.QAA09151@averstak.campus.vt.edu>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox