Re: [HACKERS] CREATE/ALTER ROLE PASSWORD ('value' USING 'method') - Mailing list pgsql-hackers

From Joe Conway
Subject Re: [HACKERS] CREATE/ALTER ROLE PASSWORD ('value' USING 'method')
Date
Msg-id 8c37e182-8398-5e79-dae5-2f77596675a6@joeconway.com
Whole thread Raw
In response to Re: [HACKERS] CREATE/ALTER ROLE PASSWORD ('value' USING 'method')  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: [HACKERS] CREATE/ALTER ROLE PASSWORD ('value' USING 'method')  (Michael Paquier <michael.paquier@gmail.com>)
List pgsql-hackers
On 03/07/2017 08:29 PM, Tom Lane wrote:
> Michael Paquier <michael.paquier@gmail.com> writes:
>> here is a separate thread dedicated to the following extension for
>> CREATE/ALTER ROLE: PASSWORD ('value' USING 'method').
>
> The parentheses seem weird ... do we really need those?

+1

> +        If you do not plan to use password authentication you can omit this
> +        option. The methods supported are <literal>md5</> to enforce a password
> +        to be MD5-encrypted, <literal>scram</> for a SCRAM-encrypted password
> +        and <literal>plain</> for an unencrypted password.  If the password

Can we please stop calling this encryption? What is being done is a form
of cryptographic hashing, not encryption.

Joe

--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development


pgsql-hackers by date:

Previous
From: Pavel Stehule
Date:
Subject: Re: [HACKERS] new gcc 7.0.1 warnings
Next
From: Dilip Kumar
Date:
Subject: Re: [HACKERS] Parallel bitmap heap scan