From zlatko.matic1@sb.t-com.hr Sun Jun  12 21:14:31 2005
X-Original-To: pgsql-general-postgresql.org@localhost.postgresql.org
Received: from localhost (unknown [200.46.204.144])
	by svr1.postgresql.org (Postfix) with ESMTP id 096CF52834;
	Sun, 12 Jun 2005 18:14:31 -0300 (ADT)
Received: from svr1.postgresql.org ([200.46.204.71])
	by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024)
	with ESMTP id 91037-05; Sun, 12 Jun 2005 21:14:25 +0000 (GMT)
Received: from ls405.htnet.hr (ls405.htnet.hr [195.29.150.97])
	by svr1.postgresql.org (Postfix) with ESMTP id 1F01952819;
	Sun, 12 Jun 2005 18:14:23 -0300 (ADT)
Received: from ls401.t-com.hr (ls401.t-com.hr [195.29.150.236])
	by ls405.htnet.hr (0.0.0/8.12.10) with ESMTP id j5CLEOmd007288;
	Sun, 12 Jun 2005 23:14:25 +0200
Received: from ls401.t-com.hr (localhost.localdomain [127.0.0.1])
	by ls401.t-com.hr (Qmlai) with ESMTP id 92236B8002;
	Sun, 12 Jun 2005 23:14:25 +0200 (CEST)
Received: from zlatkovyfkpgz6 (ao7-m140.net.t-com.hr [195.29.38.140])
	by ls401.t-com.hr (Qmlai) with SMTP id 7C07DF8028;
	Sun, 12 Jun 2005 23:14:24 +0200 (CEST)
Message-ID: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6>
From: =?iso-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
To: <pgsql-general@postgresql.org>, <pgsql-interfaces@postgresql.org>
Subject: retrieving information about password  from MS Access front-end
Date: Sun, 12 Jun 2005 23:12:27 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_00B3_01C56FA4.3321CCE0"
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Virus-Scanned: by amavisd-new at hub.org
X-Spam-Status: No, hits=0.33 tagged_above=0 required=5 tests=AWL, HTML_50_60,
	HTML_MESSAGE, X_MSMAIL_PRIORITY_HIGH, X_PRIORITY_HIGH
X-Spam-Level: 
X-Archive-Number: 200506/607
X-Sequence-Number: 79315

This is a multi-part message in MIME format.

------=_NextPart_000_00B3_01C56FA4.3321CCE0
Content-Type: text/plain;
	charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable

How could I retrieve information about actual user password, if md5 =
method is set in pg_hba.conf ?=20
I want to create VBA procedure that compares value in text box with =
actual password to determine if it is the same. As the password is =
encrypted (md5) I can't read it from pg_shaddow system table. How to =
retrieve decrypted value from pg_shaddow? Or at least, how to transfer =
value from text-box (MS Access) to Postgres so that Postgres can =
determine whether those two values are the same ?

Thanks in advance,

Zlatko
------=_NextPart_000_00B3_01C56FA4.3321CCE0
Content-Type: text/html;
	charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-2">
<META content=3D"MSHTML 6.00.2900.2627" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>How could I retrieve information about =
actual user=20
password, if md5 method is set in pg_hba.conf ? </FONT></DIV>
<DIV><FONT face=3DArial size=3D2>I want to create VBA procedure that =
compares value=20
in text box with actual password to determine if it is the same. As the =
password=20
is encrypted (md5) I can't read it from pg_shaddow system table. How to =
retrieve=20
decrypted value from pg_shaddow? Or at least, how to&nbsp;transfer value =
from=20
text-box (MS Access)&nbsp;to Postgres so that Postgres can determine =
whether=20
those two values are the same ?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Thanks in advance,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Zlatko</FONT></DIV></BODY></HTML>

------=_NextPart_000_00B3_01C56FA4.3321CCE0--




From tino@wildenhain.de Sun Jun  12 21:52:37 2005
X-Original-To: pgsql-general-postgresql.org@localhost.postgresql.org
Received: from localhost (unknown [200.46.204.144])
	by svr1.postgresql.org (Postfix) with ESMTP id B77C6528BB;
	Sun, 12 Jun 2005 18:52:37 -0300 (ADT)
Received: from svr1.postgresql.org ([200.46.204.71])
	by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024)
	with ESMTP id 99140-02; Sun, 12 Jun 2005 21:52:27 +0000 (GMT)
Received: from service-web.de (p15093784.pureserver.info [217.160.106.224])
	by svr1.postgresql.org (Postfix) with ESMTP id 46992528B2;
	Sun, 12 Jun 2005 18:52:26 -0300 (ADT)
Received: from [192.168.2.99] (G6582.g.pppool.de [80.185.101.130])
	by service-web.de (Postfix) with ESMTP id 6E23D20003A;
	Sun, 12 Jun 2005 23:52:26 +0200 (CEST)
Subject: Re: retrieving information about password  from MS
From: Tino Wildenhain <tino@wildenhain.de>
To: Zlatko =?iso-8859-2?Q?Mati=E6?= <zlatko.matic1@sb.t-com.hr>
Cc: Postgresql-General <pgsql-general@postgresql.org>,
	pgsql-interfaces@postgresql.org
In-Reply-To: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6>
References: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6>
Content-Type: text/plain; charset=iso-8859-2
Date: Sun, 12 Jun 2005 23:52:20 +0200
Message-Id: <1118613140.1183.1.camel@Andrea.peacock.de>
Mime-Version: 1.0
X-Mailer: Evolution 2.0.4 
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: by amavisd-new at hub.org
X-Spam-Status: No, hits=0.06 tagged_above=0 required=5 tests=AWL,
	FORGED_RCVD_HELO
X-Spam-Level: 
X-Archive-Number: 200506/608
X-Sequence-Number: 79316

Am Sonntag, den 12.06.2005, 23:12 +0200 schrieb Zlatko Matiæ:
> How could I retrieve information about actual user password, if md5
> method is set in pg_hba.conf ? 
> I want to create VBA procedure that compares value in text box with
> actual password to determine if it is the same. As the password is
> encrypted (md5) I can't read it from pg_shaddow system table. How to
> retrieve decrypted value from pg_shaddow? Or at least, how to transfer
> value from text-box (MS Access) to Postgres so that Postgres can
> determine whether those two values are the same ?

You cant. md5 really is a hash, not encryption (there is no decryption)
You would just try to connect - postgres will tell you if the password
is wrong.






From volkan.yazici@gmail.com Mon Jun  13 06:47:53 2005
X-Original-To: pgsql-general-postgresql.org@localhost.postgresql.org
Received: from localhost (unknown [200.46.204.144])
	by svr1.postgresql.org (Postfix) with ESMTP id CFD5552918
	for <pgsql-general-postgresql.org@localhost.postgresql.org>;
	Mon, 13 Jun 2005 03:47:53 -0300 (ADT)
Received: from svr1.postgresql.org ([200.46.204.71])
	by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024)
	with ESMTP id 40108-02
	for <pgsql-general-postgresql.org@localhost.postgresql.org>;
	Mon, 13 Jun 2005 06:47:44 +0000 (GMT)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.192])
	by svr1.postgresql.org (Postfix) with ESMTP id C3D595293D
	for <pgsql-general@postgresql.org>;
	Mon, 13 Jun 2005 03:47:42 -0300 (ADT)
Received: by wproxy.gmail.com with SMTP id 69so908317wra
	for <pgsql-general@postgresql.org>;
	Sun, 12 Jun 2005 23:47:44 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=iP3LQJBaG/Q0Is2cTO4b2Iy8EW4e/HMGnnbpJ14SxL67WKTVHDKxt/qBqI4FJsj8eKKv5r0ulLuaf5zZqtosEDgnmBeWfAHOi7r7If/3GUAHIdYY7hoEtEpmGPPqm69QBbMz+t5R5zn8YXimH7rDB9mauR5Q6/wETIEGeN4EEWY=
Received: by 10.54.35.71 with SMTP id i71mr2358439wri;
	Sun, 12 Jun 2005 23:47:44 -0700 (PDT)
Received: by 10.54.30.45 with HTTP; Sun, 12 Jun 2005 23:47:44 -0700 (PDT)
Message-ID: <7104a737050612234734ffc2a5@mail.gmail.com>
Date: Mon, 13 Jun 2005 09:47:44 +0300
From: Volkan YAZICI <volkan.yazici@gmail.com>
Reply-To: Volkan YAZICI <volkan.yazici@gmail.com>
To: =?ISO-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
Subject: Re: [INTERFACES] retrieving information about password from MS Access
	front-end
Cc: pgsql-general@postgresql.org, pgsql-interfaces@postgresql.org
In-Reply-To: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-2
Content-Transfer-Encoding: base64
Content-Disposition: inline
References: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6>
X-Virus-Scanned: by amavisd-new at hub.org
X-Spam-Status: No, hits=0.138 tagged_above=0 required=5 tests=AWL, RCVD_BY_IP
X-Spam-Level: 
X-Archive-Number: 200506/615
X-Sequence-Number: 79323
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From zlatko.matic1@sb.t-com.hr Mon Jun  13 22:33:54 2005
X-Original-To: pgsql-general-postgresql.org@localhost.postgresql.org
Received: from localhost (unknown [200.46.204.144])
	by svr1.postgresql.org (Postfix) with ESMTP id EF3305288D;
	Mon, 13 Jun 2005 19:33:54 -0300 (ADT)
Received: from svr1.postgresql.org ([200.46.204.71])
	by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024)
	with ESMTP id 47681-09; Mon, 13 Jun 2005 22:33:49 +0000 (GMT)
Received: from ls405.htnet.hr (ls405.htnet.hr [195.29.150.97])
	by svr1.postgresql.org (Postfix) with ESMTP id E288852899;
	Mon, 13 Jun 2005 19:33:47 -0300 (ADT)
Received: from ls401.t-com.hr (ls401.t-com.hr [195.29.150.236])
	by ls405.htnet.hr (0.0.0/8.12.10) with ESMTP id j5DMXkmZ001136;
	Tue, 14 Jun 2005 00:33:46 +0200
Received: from ls401.t-com.hr (localhost.localdomain [127.0.0.1])
	by ls401.t-com.hr (Qmlai) with ESMTP id 01541B8007;
	Tue, 14 Jun 2005 00:33:46 +0200 (CEST)
Received: from zlatkovyfkpgz6 (ao3-m69.net.t-com.hr [195.29.34.69])
	by ls401.t-com.hr (Qmlai) with SMTP id BB27CF8005;
	Tue, 14 Jun 2005 00:33:44 +0200 (CEST)
Message-ID: <000001c57067$f6a22110$45221dc3@zlatkovyfkpgz6>
From: =?iso-8859-2?Q?Zlatko_Mati=E6?= <zlatko.matic1@sb.t-com.hr>
To: "Volkan YAZICI" <volkan.yazici@gmail.com>
Cc: <pgsql-general@postgresql.org>, <pgsql-interfaces@postgresql.org>
References: <00b901c56f93$b6d20520$8c261dc3@zlatkovyfkpgz6>
	<7104a737050612234734ffc2a5@mail.gmail.com>
Subject: Re: [INTERFACES] retrieving information about password from MS Access
	front-end
Date: Mon, 13 Jun 2005 14:34:52 +0200
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-2";
	reply-type=original
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Virus-Scanned: by amavisd-new at hub.org
X-Spam-Status: No, hits=0.216 tagged_above=0 required=5 tests=AWL,
	DATE_IN_PAST_06_12
X-Spam-Level: 
X-Archive-Number: 200506/650
X-Sequence-Number: 79358

Thanks.
----- Original Message ----- 
From: "Volkan YAZICI" <volkan.yazici@gmail.com>
To: "Zlatko Matiæ" <zlatko.matic1@sb.t-com.hr>
Cc: <pgsql-general@postgresql.org>; <pgsql-interfaces@postgresql.org>
Sent: Monday, June 13, 2005 8:47 AM
Subject: Re: [GENERAL] [INTERFACES] retrieving information about password 
from MS Access front-end


> Hi,
>
> On 6/13/05, Zlatko Matiæ <zlatko.matic1@sb.t-com.hr> wrote:
>> I want to create VBA procedure that compares value in text box with 
>> actual
>> password to determine if it is the same. As the password is encrypted 
>> (md5)
>> I can't read it from pg_shaddow system table. How to retrieve decrypted
>> value from pg_shaddow?
>
> It's (practically) impossible to decrypt a MD5 hashed password.
>
>> Or at least, how to transfer value from text-box (MS Access) to Postgres
>> so that Postgres can determine whether those two values
>> are the same ?
>
> You need to MD5 hash the input passsword and compare hashed input
> password with the one in pg_shadow. For instance:
>
> -- $1 for password input.
> SELECT usernm FROM recs WHERE passwd = md5($1)
>
> Furthermore, it'll bring some potential security problems to be able
> to access pg_shadow which requires db admin permissions.
>
> Regards.
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org
>