Re: why am i able to access my db with username and ANY password? - Mailing list pgsql-general

From Lincoln Yeoh
Subject Re: why am i able to access my db with username and ANY password?
Date
Msg-id 3.0.5.32.20010121192055.008ae520@192.228.128.13
Whole thread Raw
List pgsql-general
At 10:21 PM 1/20/01 -0600, Thomas T. Thai wrote:
>i tried accessing my db with a known username in pgsql's access, but any
>password works. this is even with the password assigned when the user was
>created.

You have to add controls in the pg_hba.conf file. Add a password line and
postgresql will start checking for passwords.

However before that make sure you set the passwords with the various alter
user and create user SQL commands, or you might find you have to restart
postgresql again ;). If you forget, the postgresql super user password used
to be \N by default. Look in one of the password files in the DATA
directory for it.

When you turn on password checking you'll find that some of the scripts
won't work. For example pg_dump_all won't work but pg_dump can still work.
A number of the scripts are designed to work in a passwordless environment.

Cheerio,
Link.



pgsql-general by date:

Previous
From: "Thomas T. Thai"
Date:
Subject: Re: why am i able to access my db with username and ANY password?
Next
From: Alexander Jerusalem
Date:
Subject: postgres memory management