Re: [BUGS] BUG #10250: pgAdmin III 1.16.1 stores unescaped plaintext password - Mailing list pgadmin-hackers

From Stephen Frost
Subject Re: [BUGS] BUG #10250: pgAdmin III 1.16.1 stores unescaped plaintext password
Date
Msg-id 20140508000726.GE2556@tamriel.snowman.net
Whole thread Raw
In response to Re: [BUGS] BUG #10250: pgAdmin III 1.16.1 stores unescaped plaintext password  (Heikki Linnakangas <hlinnakangas@vmware.com>)
Responses Re: Re: [BUGS] BUG #10250: pgAdmin III 1.16.1 stores unescaped plaintext password  (Dave Page <dpage@pgadmin.org>)
List pgadmin-hackers
* Heikki Linnakangas (hlinnakangas@vmware.com) wrote:
> (forwarding to pgadmin-hackers)

Ah.

> On 05/07/2014 06:44 PM, Stephen Frost wrote:
> >* dlo@isam.kiwi (dlo@isam.kiwi) wrote:
> >>but when the credential contains the delimiter (colon) it fails to be
> >>read back out and app responds with "invalid credentials".
> >>
> >>x.x.x.x:5432:*:username:password:with:colons
> >
> >Per the fine documentation, you need to escape any such usage with a
> >backslash.  Please review:
>
> Stephen, you missed the context. pgadmin3 saves .pgpass, when you
> check the "store password" checkbox in the connection dialog. And
> apparantly pgadmin3 doesn't do that escaping properly.

Wow, that's pretty rough.  Hopefully they'll be able to fix it soon. :)

    Thanks,

        Stephen

pgadmin-hackers by date:

Previous
From: Heikki Linnakangas
Date:
Subject: Re: [BUGS] BUG #10250: pgAdmin III 1.16.1 stores unescaped plaintext password
Next
From: Dave Page
Date:
Subject: Re: Re: [BUGS] BUG #10250: pgAdmin III 1.16.1 stores unescaped plaintext password