Re: MD5 password issue - Mailing list pgsql-general

From Alvaro Herrera
Subject Re: MD5 password issue
Date
Msg-id 20090115185438.GI6440@alvh.no-ip.org
Whole thread Raw
In response to Re: MD5 password issue  (Andreas Wenk <a.wenk@netzmeister-st-pauli.de>)
Responses Re: MD5 password issue  (Andreas Wenk <a.wenk@netzmeister-st-pauli.de>)
List pgsql-general
Andreas Wenk wrote:

> Yes thats correct with the IP address range. Maybe I did not understand
> the auth concept yet. I thought, that with METHOD set to md5, a md5
> hashed password is required. The password is submitted with the PHP 5
> pg_connect function - as plain text.

It is specified to pg_connect as plain text, but it is sent over the
wire md5-hashed.

> So maybe the better question is: what is the difference between METHOD
> password and md5? As I assume now because of your answers, it has
> nothing to do with either the password is md5 hashed or not?

The difference is what travels on the wire.

--
Alvaro Herrera                                http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support

pgsql-general by date:

Previous
From: Tom Lane
Date:
Subject: Re: Autovacuum daemon terminated by signal 11
Next
From: mailinglists@net-virtual.com
Date:
Subject: Re: Query question