Re: [GENERAL] Service configuration file and password security - Mailing list pgsql-general

From Francisco Olarte
Subject Re: [GENERAL] Service configuration file and password security
Date
Msg-id CA+bJJbzKFFXh05+n258c8+Bge+=L=qhKLMgcHRNwpwJ_yGT1Gg@mail.gmail.com
Whole thread Raw
In response to [GENERAL] Service configuration file and password security  (JP Jacoupy <jpjacoupy@protonmail.com>)
List pgsql-general
On Thu, Feb 16, 2017 at 2:57 PM, JP Jacoupy <jpjacoupy@protonmail.com> wrote:
> Can the password be stored in an encrypted way inside a service
> configuration file?

There is not

Passwords are not stored in the ( sometimes shared, world readable )
service configuration file ( pg_sevice), but it the UNREADABLE FOR
OTHERS password file. They need to be stored in a way which libpq and
friends can use, so even if they were encrypted they could be
extracted easily byjust debugging and setting a breakpoint in it.

If you are looking at something like a password store with a master
password at least in unix a user account with a .pgpass file works as
it. You store every password in file readable by a user, .pgpass, and
you use that user login credentials to get access to it.

Francisco Olarte.


pgsql-general by date:

Previous
From: Adrian Klaver
Date:
Subject: Re: [GENERAL] Service configuration file and password security
Next
From: "Hu, Patricia"
Date:
Subject: [GENERAL] application generated an eternal block in the database