Stephen Frost <sfrost@snowman.net> writes:
> * Joshua D. Drake (jd@commandprompt.com) wrote:
>> template1=3D# alter user foo rename to bar;
>> NOTICE: MD5 password cleared because of role rename
>> Now we have to reset the password.. which seems an extra
>> step that shouldn't be required.
> Wouldn't this be because the username is used as the salt for MD5 and so
> there's no way to update the password because the system doesn't know
> the original password?
Yeah. This isn't changing unless you have an alternative that's not
worse (ie, doesn't defeat the purpose of storing an encrypted password).
regards, tom lane
