pg.ddx.io pgsql-interfaces@postgresql.org mailing list archive
help / color / mirror / Atom feedSecurity!!!
7+ messages / 5 participants
[nested] [flat]
* Security!!!
@ 1998-03-20 03:11 Christopher Luk <wluk@hkcccc.org>
1998-03-20 12:07 ` Re: [INTERFACES] Security!!! Dr David Scott <ds@ganymede.com>
0 siblings, 1 reply; 7+ messages in thread
From: Christopher Luk @ 1998-03-20 03:11 UTC (permalink / raw)
To: pgsql-interfaces
I wonder if my setting have problem or not. I found that there is no
security issue on my postgres95.
1. I have a super user postgres, however, when I login as somebody else
which should not have right to the postgres95 database, I can use the
following command to act as postgres super user.
psql -u "database name"
>>Username : postgres
>>password : "anythingelse"
After this command, I can use the sql monitor as super user postgres,
which means that I can create, drop, update anything or destroy everything
on the database only if I can login to the server which have postgres95
installed.
2. I am using Postodbc as odbc driver on windows 95. Same as above, I can
login as anybody else without a password check even I use "alter user
[username] with password [password]" to add a password.
Walking through the documents, still didn't find any solution.
Please help if there is a solution to this problem. THx
(Linux 2.0.30 (standard), postgres 6.3, gcc 2.7, windows 95 OSR2)
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: [INTERFACES] Security!!!
1998-03-20 03:11 Security!!! Christopher Luk <wluk@hkcccc.org>
@ 1998-03-20 12:07 ` Dr David Scott <ds@ganymede.com>
0 siblings, 0 replies; 7+ messages in thread
From: Dr David Scott @ 1998-03-20 12:07 UTC (permalink / raw)
To: Christopher Luk <wluk@hkcccc.org>; +Cc: pgsql-interfaces
Check your postgres passwd file (_not_ the /etc/passwd file). Sounds like
you have user postgres in it without a password.
David Scott
Montreal
^ permalink raw reply [nested|flat] 7+ messages in thread
* Security
@ 2001-05-19 06:16 Ernesto A. Lira Castro <lira@ver.megared.net.mx>
0 siblings, 0 replies; 7+ messages in thread
From: Ernesto A. Lira Castro @ 2001-05-19 06:16 UTC (permalink / raw)
To: pgsql-interfaces
I'm trying to set login & passwords to my system with Perl DBI for
Postgresql, but i want to have a field on my Postgres's database
that can be type password!! is that possible?? i see only fields types
(Char, integer, long . . .) i want some password to be encrypted.
And where can i get some information for implementing that security on
my system!
Thanks
i hope for your answer
^ permalink raw reply [nested|flat] 7+ messages in thread
* Security
@ 2001-05-19 06:36 Ernesto A. Lira Castro <lira@ver.megared.net.mx>
2001-05-19 09:18 ` Re: Security Peter Eisentraut <peter_e@gmx.net>
2001-05-20 21:49 ` Re: Security Jeremy Buchmann <jeremy@wellsgaming.com>
0 siblings, 2 replies; 7+ messages in thread
From: Ernesto A. Lira Castro @ 2001-05-19 06:36 UTC (permalink / raw)
To: pgsql-interfaces
I'm trying to set login & passwords to my system with Perl DBI for
Postgresql, but i want to have a field on my Postgres's database
that can be type password!! is that possible?? i see only fields types
(Char, integer, long . . .) i want some password to be encrypted.
And where can i get some information for implementing that security on
my system!
Thanks
i hope for your answer
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Security
2001-05-19 06:36 Security Ernesto A. Lira Castro <lira@ver.megared.net.mx>
@ 2001-05-19 09:18 ` Peter Eisentraut <peter_e@gmx.net>
1 sibling, 0 replies; 7+ messages in thread
From: Peter Eisentraut @ 2001-05-19 09:18 UTC (permalink / raw)
To: Ernesto A. Lira Castro <lira@ver.megared.net.mx>; +Cc: pgsql-interfaces
Ernesto A. Lira Castro writes:
> I'm trying to set login & passwords to my system with Perl DBI for
> Postgresql, but i want to have a field on my Postgres's database
> that can be type password!! is that possible?? i see only fields types
> (Char, integer, long . . .) i want some password to be encrypted.
In contrib/pgcrypto in the source tree there are some digest (hash)
functions (note: digest != encryption) that you might find useful.
--
Peter Eisentraut peter_e@gmx.net http://funkturm.homeip.net/~peter
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Security
2001-05-19 06:36 Security Ernesto A. Lira Castro <lira@ver.megared.net.mx>
@ 2001-05-20 21:49 ` Jeremy Buchmann <jeremy@wellsgaming.com>
1 sibling, 0 replies; 7+ messages in thread
From: Jeremy Buchmann @ 2001-05-20 21:49 UTC (permalink / raw)
To: Ernesto A. Lira Castro <lira@ver.megared.net.mx>; pgsql-interfaces
> I'm trying to set login & passwords to my system with Perl DBI for
> Postgresql, but i want to have a field on my Postgres's database
> that can be type password!! is that possible?? i see only fields types
> (Char, integer, long . . .) i want some password to be encrypted.
You can use MD5 or SHA perl modules to get a digest of the password and then
get the hex representation of the digest and store that in the database as a
char or varchar.
> And where can i get some information for implementing that security on
> my system!
The MD5 and SHA modules are on cpan.org. I only have experience with the
MD5 module, but it's very simple to use, provided you know a little Perl. I
can show you code if you don't understand the examples provided with the
module.
-- Jeremy [jeremy@wellsgaming.com]
^ permalink raw reply [nested|flat] 7+ messages in thread
* Security
@ 2001-07-02 03:03 Ernesto A. Lira Castro <lira@ver.megared.net.mx>
0 siblings, 0 replies; 7+ messages in thread
From: Ernesto A. Lira Castro @ 2001-07-02 03:03 UTC (permalink / raw)
To: pgsql-interfaces
I'm trying to implement a Module mod_auth_pg95 "Postregres95
Authentication", but i couldn't use it, i wanna now if this module
already runs or have a bug ,or if somebody have a new version of this
module, i really need it.
Thanks
Ernesto
^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2001-07-02 03:03 UTC | newest]
Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
1998-03-20 03:11 Security!!! Christopher Luk <wluk@hkcccc.org>
1998-03-20 12:07 ` Dr David Scott <ds@ganymede.com>
2001-05-19 06:16 Security Ernesto A. Lira Castro <lira@ver.megared.net.mx>
2001-05-19 06:36 Security Ernesto A. Lira Castro <lira@ver.megared.net.mx>
2001-05-19 09:18 ` Re: Security Peter Eisentraut <peter_e@gmx.net>
2001-05-20 21:49 ` Re: Security Jeremy Buchmann <jeremy@wellsgaming.com>
2001-07-02 03:03 Security Ernesto A. Lira Castro <lira@ver.megared.net.mx>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox