Thread: pgAdmin III 1.6.2 sends plaintext password

pgAdmin III 1.6.2 sends plaintext password

From
patrimith
Date:
Greetings List!

I'm trying get remote management of postrgesql on Ubuntu 5.10 set up.

I am hoping to set up authentication in pg_hba.conf as

host all all 192.168.0.0/0 md5

but I wasn't successful. When I relaxed it to:

host all all 192.168.0.0/0 password

everything worked fine.

Can someone let me know how to configure pgAdmin so that it sends the
password md5 encrypted?

Thanks,

Patrick Smith
http://www.openengagement.com

-- 
View this message in context: http://www.nabble.com/pgAdmin-III-1.6.2-sends-plaintext-password-tf3235755.html#a8992548
Sent from the PostgreSQL - pgadmin support mailing list archive at Nabble.com.



Re: pgAdmin III 1.6.2 sends plaintext password

From
"Andy Shellam (Mailing Lists)"
Date:
patrimith wrote: <blockquote cite="mid8992548.post@talk.nabble.com" type="cite"><pre wrap="">Greetings List!

I'm trying get remote management of postrgesql on Ubuntu 5.10 set up.

I am hoping to set up authentication in pg_hba.conf as

host all all 192.168.0.0/0 md5

but I wasn't successful. When I relaxed it to:

host all all 192.168.0.0/0 password

everything worked fine.

Can someone let me know how to configure pgAdmin so that it sends the
password md5 encrypted?

Thanks,

Patrick Smith
<a class="moz-txt-link-freetext" href="http://www.openengagement.com">http://www.openengagement.com</a>
 </pre></blockquote><font size="-1"><font face="Arial"><br /> I currently talk to a PostgreSQL 8.2.3 server using
PgAdmin1.6.2 with MD5 encrypted passwords just fine.<br /> What is the value of "password_encryption" in your
PostgreSQLserver's postgresql.conf file?<br /><br /> [root@byron ~]# cat /endeavour/dbstore/postgresql.conf|grep
'password_encryption'<br/> password_encryption = on<br /> [root@byron ~]#<br /><br /> Try setting it to 'on' and
restartingyour server.<br /><br /> Regards,<br /><br /> Andy.<br /></font></font> 

Re: pgAdmin III 1.6.2 sends plaintext password

From
patrimith
Date:

Andy Shellam (Mailing Lists) wrote:
> 
> What is the value of "password_encryption" in your PostgreSQL server's 
> postgresql.conf file?
> 
> [root@byron ~]# cat /endeavour/dbstore/postgresql.conf|grep 
> 'password_encryption'
> password_encryption = on
> [root@byron ~]#
> 

That's the value in my PostgreSQL server's postgresql.conf.

Are you saying that pgAdmin knows the password_encryption setting for the
server?

I'd like to be able to connect using both plaintext and md5-encrypted
passwords to the same server depending on the environment in which the
client lives.



-- 
View this message in context: http://www.nabble.com/pgAdmin-III-1.6.2-sends-plaintext-password-tf3235755.html#a8994189
Sent from the PostgreSQL - pgadmin support mailing list archive at Nabble.com.



Re: pgAdmin III 1.6.2 sends plaintext password

From
"Andy Shellam (Mailing Lists)"
Date:
patrimith wrote: <blockquote cite="mid8994189.post@talk.nabble.com" type="cite"><pre wrap="">
Andy Shellam (Mailing Lists) wrote: </pre><blockquote type="cite"><pre wrap="">What is the value of
"password_encryption"in your PostgreSQL server's 
 
postgresql.conf file?

[root@byron ~]# cat /endeavour/dbstore/postgresql.conf|grep 
'password_encryption'
password_encryption = on
[root@byron ~]#
   </pre></blockquote><pre wrap="">
That's the value in my PostgreSQL server's postgresql.conf.

Are you saying that pgAdmin knows the password_encryption setting for the
server? </pre></blockquote><br /> I'm not sure, but I'd hazard a guess it's the underlying libpq library that during
thehandshake works out which authentication scheme to use.<br /> How was your user created?  When you add a new login
role,it stores the encrypted password in the login profile:<br /><br /> CREATE ROLE test LOGIN ENCRYPTED PASSWORD
'md505a671c66aefea124cc08b76ea6d30bb'<br/>   NOINHERIT<br />    VALID UNTIL 'infinity';<br /><br /> If the value of
password_encryptionwas set to off when the user was created, I'd guess it would create it with a plain-text password
(not100% sure.)<br /><br /><blockquote cite="mid8994189.post@talk.nabble.com" type="cite"><pre wrap="">
 
I'd like to be able to connect using both plaintext and md5-encrypted
passwords to the same server depending on the environment in which the
client lives. </pre></blockquote><br /> Create a different line in pg_hba.conf for each host environment (network IP
range),using the relevant "password" or "md5" keyword.<br /><br /> Andy.<br />