Postgres Pro
Downloads
Home   >   mailing lists

Thread: Change password issue

Change password issue

From
"Dave Page"
Date:
I spotted an issue with the change password dialogue today; if you have
connected using trust authentication, or a password in pgpass.conf, then
there is no way to change the password because the pgServer object
doesn't know what the original one is.

The simple fix would be to remove the 'enter old password' requirement,
but that just doesn't feel right. For pgpass connections we could try to
retrieve the password from the file, but there is no way for trusted
connections that I can see.

Thoughts?

Regards, Dave

Re: Change password issue

From
"Dave Page"
Date:

> -----Original Message-----
> From: Andreas Pflug [mailto:pgadmin@pse-consulting.de]
> Sent: 17 February 2006 14:35
> To: Dave Page
> Cc: pgadmin-hackers
> Subject: Re: [pgadmin-hackers] Change password issue
>
> Dave Page wrote:
> > I spotted an issue with the change password dialogue today;
> if you have
> > connected using trust authentication, or a password in
> pgpass.conf, then
> > there is no way to change the password because the pgServer object
> > doesn't know what the original one is.
> >
> > The simple fix would be to remove the 'enter old password'
> requirement,
> > but that just doesn't feel right. For pgpass connections we
> could try to
> > retrieve the password from the file, but there is no way for trusted
> > connections that I can see.
> >
> > Thoughts?
>
> On the TODO list.

It is? Can't see it for looking :-(

> As soon as we encrypt the password to
> create the SQL
> we can ask for the password, encrypt and check against
> pg_authid ourselves.

Yeah, that sounds reasonable.

/D

Re: Change password issue

From
Andreas Pflug
Date:
Dave Page wrote:
>>On the TODO list.
>
>
> It is? Can't see it for looking :-(

I meant _Let's put it_ on the TODO list. Apparenly abbrevations and
omissions might lead to decreased understandability :-)

Regards,
Andreas

Re: Change password issue

From
"Dave Page"
Date:

> -----Original Message-----
> From: Andreas Pflug [mailto:pgadmin@pse-consulting.de]
> Sent: 17 February 2006 15:22
> To: Dave Page
> Cc: pgadmin-hackers
> Subject: Re: [pgadmin-hackers] Change password issue
>
> Dave Page wrote:
> >>On the TODO list.
> >
> >
> > It is? Can't see it for looking :-(
>
> I meant _Let's put it_ on the TODO list. Apparenly abbrevations and
> omissions might lead to decreased understandability :-)

Err, yuh. Dunno about German, but in English we have those extra words
for a reason :-p

Added to todo.

/D