Postgres Pro
Downloads
Home   >   mailing lists

Salt in encrypted password in pg_shadow - Mailing list pgsql-general

From David Garamond
Subject Salt in encrypted password in pg_shadow
Date
Msg-id 413DB97D.3000104@zara.6.isreserved.com
Whole thread Raw
Responses Re: Salt in encrypted password in pg_shadow  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
Tree view 
I read that the password hash in pg_shadow is salted with username. Is
this still the case? If so, since probably 99% of all PostgreSQL has
"postgres" as the superuser name, wouldn't it be better to use standard
Unix/Apache MD5 hash instead?

--
dave

pgsql-general by date:

Previous
From: David Garamond
Date:
Subject: Re: restricting non superuser from accessing other databases
Next
From: David Garamond
Date:
Subject: Dumping pg_shadow and pg_database as SQL using pg_dump