On 11/23/22 02:23, Nikolas Hanry wrote:
>
> Dear Community,
Comments inline below.
>
> we tried to change the auth. in our postgresql environment (PostgreSQL V.11)
> from MD5 to SCRUM SHA 256
>
> - stop the services and killed all active connections
> - changed with alter and set pw the editor user to sha (psql)
a) What is password_encryption set to in postgresql.conf?
b) What was the exact ALTER command?
c) What is meant by editor user?
> - checked if the pw changes successfull (psql and pg4admin)
Check how?
> - tried to open new document from GIS desktop and edit --> error msg.
> connection not available
a) Post the error message.
b) What is GIS desktop?
> - after few minutes the pw synchonized and changed automatically back
How did you determine the password was changed back?
>
> My questions are:
> Is it possible to work with GIS files (desktop and web) after pw changes
> to SHA 256? We are handling with this issue and don't want to change it
> directly for gisadmin (owner all db's) either with the postgres user
>
> Does the changes revert back automatically to MD5 after a while due
> synchronization? In our test environment tried the same way, although
> the only difference was that we changed as well pg_hba_conf as well
> host postgres all 172.xxx.xxx.83/32 scram-sha-256
> and Type DB USER ADDRESS METHOD --> trust and
> scram-sha-256 overall.
What are the settings in pg_hba.conf in the production setup?
>
> Many thanks in advance
> Best Regards
> Nikola Lubenov
>
>
>
--
Adrian Klaver
adrian.klaver@aklaver.com