From: Volkan YAZICI <volkan.yazici@gmail.com>
To: Zlatko Matić <zlatko.matic1@sb.t-com.hr>
Cc: pgsql-general@postgresql.org
Cc: pgsql-interfaces@postgresql.org
Subject: Re: [INTERFACES] retrieving information about password from MS Access front-end
Date: Mon, 13 Jun 2005 09:47:44 +0300
Message-ID: <7104a737050612234734ffc2a5@mail.gmail.com> (raw)
In-Reply-To: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6>
References: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6>
Hi,
On 6/13/05, Zlatko Matić <zlatko.matic1@sb.t-com.hr> wrote:
> I want to create VBA procedure that compares value in text box with actual
> password to determine if it is the same. As the password is encrypted (md5)
> I can't read it from pg_shaddow system table. How to retrieve decrypted
> value from pg_shaddow?
It's (practically) impossible to decrypt a MD5 hashed password.
> Or at least, how to transfer value from text-box (MS Access) to Postgres
> so that Postgres can determine whether those two values
> are the same ?
You need to MD5 hash the input passsword and compare hashed input
password with the one in pg_shadow. For instance:
-- $1 for password input.
SELECT usernm FROM recs WHERE passwd = md5($1)
Furthermore, it'll bring some potential security problems to be able
to access pg_shadow which requires db admin permissions.
Regards.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: volkan.yazici@gmail.com, zlatko.matic1@sb.t-com.hr, pgsql-general@postgresql.org
Subject: Re: [INTERFACES] retrieving information about password from MS Access front-end
In-Reply-To: <7104a737050612234734ffc2a5@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox