> Bruce Momjian <pgman@candle.pha.pa.us> writes:
> > MD5(MD5(username+user_salt)+random_salt)
Sorry, it is:
MD5(MD5(password+user_salt)+random_salt)
>
> > Postmaster takes its pg_shadow MD5(username+user_salt) and does another
> > MD5 with the random salt and compares it with what was sent from the
> > client.
>
> Doesn't seem quite right ... where's the password?
>
> regards, tom lane
>
-- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610)
853-3000+ If your life is a hard drive, | 830 Blythe Avenue + Christ can be your backup. | Drexel Hill,
Pennsylvania19026
