wrong password accepted - Mailing list pgsql-admin

From Raphael Bauduin
Subject wrong password accepted
Date
Msg-id 20030829131240.GA30354@raphael
Whole thread Raw
Responses Re: wrong password accepted  (Sam Barnett-Cormack <s.barnett-cormack@lancaster.ac.uk>)
List pgsql-admin
Hi,

this is a strange situation I just discovered on a postgresql
7.2.1-2woody2 (Debian as you can see...). I use pg_hba to specify
password ahtentications for clients. HEre's the line:
host         all         127.0.0.1    255.255.255.0       password  pass-file

I just discovered that when I use the correct password to whach I append
text, it is accepted (though this is not correct...)
For example, if my password is postgres, the following will also be
accepted: postgresql, postgresblabla, postgres2 ...... but it will
reject postgrex eg.

I couldn't reproduce it with postgres 7.3 (self compiled, the problem
above happens with the standard Debian package), but 7.3 doesn't seem to
use a file to store the password (didn't have time to look a lot at 7.3 :(.

Is this a known problem? Did I miss the answer when I browsed the web
and mail archives?

Thanks for your help.

Raph

pgsql-admin by date:

Previous
From: Andrew Biagioni
Date:
Subject: Re: Can not deleted all record
Next
From: Sam Barnett-Cormack
Date:
Subject: Re: wrong password accepted