Subject: Re: Can we stop defaulting to 'md5'?
To: Christoph Berg <myon@debian.org>, Stephen Frost <sfrost@snowman.net>,
 =?UTF-8?B?RGV2cmltIEfDvG5kw7x6?= <devrim@gunduz.org>,
 Craig Ringer <craig@2ndquadrant.com>,
 pgsql-pkg-yum <pgsql-pkg-yum@postgresql.org>
References: <20200528163856.GB107313@msg.df7cb.de>
From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Organization: 2ndQuadrant
Message-ID: <ed0f8d57-5b2c-b08f-f94b-e15e784e8cef@2ndquadrant.com>
Date: Thu, 28 May 2020 22:05:40 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0)
 Gecko/20100101 Thunderbird/52.9.1
MIME-Version: 1.0
In-Reply-To: <20200528163856.GB107313@msg.df7cb.de>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: de-DE
Content-Transfer-Encoding: 7bit
Precedence: bulk

On 2020-05-28 18:38, Christoph Berg wrote:
> Why do I have to decide*in pg_hba.conf*  which hash algorithm is used?
> Why can't that just be "password"?
> 
> The password_encryption GUC should be the only place concerned with
> that, and it should only be used for new passwords. Existing passwords
> should just continue to work.*That*  would allow seamless upgrades.

You get that if you set the authentication method to "md5".  (Clearly 
not a very clear name, but it exists.)

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services