Re: Re: Encrypting pg_shadow passwords - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Re: Encrypting pg_shadow passwords
Date
Msg-id Pine.LNX.4.30.0106261924580.724-100000@peter.localdomain
Whole thread Raw
In response to Re: Re: Encrypting pg_shadow passwords  (Bruce Momjian <pgman@candle.pha.pa.us>)
Responses Re: Re: Encrypting pg_shadow passwords  (Bruce Momjian <pgman@candle.pha.pa.us>)
List pgsql-hackers
Bruce Momjian writes:

> The only reason to add double-crypt is so we can continue to use
> /etc/passwd entries on systems that use crypt() in /etc/passwd.

On the sites that are most likely to utilize that (because they have a lot
of users) it won't work (because they use NIS).  There are better ways to
do that (e.g., PAM).

Also, see http://httpd.apache.org/docs/misc/FAQ.html#passwdauth

-- 
Peter Eisentraut   peter_e@gmx.net   http://funkturm.homeip.net/~peter



pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: Re: Encrypting pg_shadow passwords
Next
From: Víctor Romero
Date:
Subject: Benchmarking