pg.ddx.io  pgsql-interfaces@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Bruce Momjian <pgman@candle.pha.pa.us>
To: ljb <lbayuk@mindspring.com>
Cc: pgsql-interfaces@postgresql.org
Subject: Re: Shouldn't .pgpass work with anything which uses libpq?
Date: Wed, 8 Jan 2003 21:24:06 -0500 (EST)
Message-ID: <200301090224.h092O7p00351@candle.pha.pa.us> (raw)
In-Reply-To: <avijra$2f0t$1@news.hub.org>

ljb wrote:
> > However, your posting brings up an interesting issue.  Our current code
> > makes no distinction between "" as a password, and a NULL password. 
> > They are both equivalent to "I have supplied no password".  If you
> > create a public user with an empty password, "", there is no way to log
> > in as that user, because "" is considered to be "no password".
> > 
> > I don't want to play with this in 7.3.X, but is it something we should
> > consider cleaning up for 7.4?
> 
> There is a precedence for the current behavior. Another DBMS I've used
> takes an empty password for an account to mean "this account is disabled".
> Therefore it is impossible in that DBMS to have a valid account with no
> password. Which to me is equivalent to PostgreSQL saying "if passwords are
> enabled, it is impossible to login to an account with an empty or NULL
> password". I like that behavior.

Oh, OK.

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073



view thread (5+ messages)

Message-ID: <200301090224.h092O7p00351@candle.pha.pa.us>
Permalink:  ../200301090224.h092O7p00351@candle.pha.pa.us/
Also on:    postgresql.org/message-id/200301090224.h092O7p00351@candle.pha.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-interfaces@postgresql.org
  Cc: pgman@candle.pha.pa.us, lbayuk@mindspring.com
  Subject: Re: Shouldn't .pgpass work with anything which uses libpq?
  In-Reply-To: <200301090224.h092O7p00351@candle.pha.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox