Re: Changing Passwords as Encrypted not Clear-Text - Mailing list pgsql-general

From Alban Hertroys
Subject Re: Changing Passwords as Encrypted not Clear-Text
Date
Msg-id CAF-3MvPE72Y4VeGbE5yu-5OS-5ffwH1Szv4fV5F2RRLf8x97MQ@mail.gmail.com
Whole thread Raw
In response to Re: Changing Passwords as Encrypted not Clear-Text  (MURAT KOÇ <m.koc21@gmail.com>)
Responses Re: Changing Passwords as Encrypted not Clear-Text
List pgsql-general
On 19 December 2011 16:26, MURAT KOÇ <m.koc21@gmail.com> wrote:
> Hi Adrian,
>
> I wrote a desktop application on Windows by using "Npgsql.dll". So, I send
> SQL statement to database from this application code. I can't use psql
> command line (I know "\password" command changes password encrypted text).
>
> Because of this, I have to use "ALTER USER" statement from application code.
> Or what could you give another advice?

Apparently psql doesn't send a plain ALTER ROLE statement. It probably
uses the binary protocol. Perhaps your application can do the same.

Alternatively, you can secure your (apparently insecure) connection to
the DB using SSL or an ssh tunnel or somesuch.

That said, if you are having issues with a fellow DBA, you should
create a policy that you don't use each others' login credentials when
it matters. You're DBA's, there is no security measure that will stop
you from obtaining private data from the databases you manage. Access
to the log files is only a small part of that.

--
If you can't see the forest for the trees,
Cut the trees and you'll see there is no forest.

pgsql-general by date:

Previous
From: MURAT KOÇ
Date:
Subject: Re: Changing Passwords as Encrypted not Clear-Text
Next
From: Guillaume Lelarge
Date:
Subject: Re: Changing Passwords as Encrypted not Clear-Text