md5 still listed as an option in pg_hba.conf.sample

Started by Mark Dilgerover 8 years ago6 messages
#1Mark Dilger
hornschnorter@gmail.com

The comment that I think needs updating is:

# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256",
# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert".

The "md5" option no longer works, as discussed in other threads.

mark

--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

#2Robert Haas
robertmhaas@gmail.com
In reply to: Mark Dilger (#1)
Re: md5 still listed as an option in pg_hba.conf.sample

On Tue, Sep 26, 2017 at 1:23 PM, Mark Dilger <hornschnorter@gmail.com> wrote:

The comment that I think needs updating is:

# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256",
# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert".

The "md5" option no longer works, as discussed in other threads.

It works for me.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

#3Bruce Momjian
bruce@momjian.us
In reply to: Mark Dilger (#1)
Re: md5 still listed as an option in pg_hba.conf.sample

On Tue, Sep 26, 2017 at 10:23:55AM -0700, Mark Dilger wrote:

The comment that I think needs updating is:

# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256",
# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert".

The "md5" option no longer works, as discussed in other threads.

Uh, I think that "md5" still works just fine.

--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ As you are, so once was I.  As I am, so you will be. +
+                      Ancient Roman grave inscription +

--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

#4Mark Dilger
hornschnorter@gmail.com
In reply to: Bruce Momjian (#3)
Re: md5 still listed as an option in pg_hba.conf.sample

On Sep 26, 2017, at 10:36 AM, Bruce Momjian <bruce@momjian.us> wrote:

On Tue, Sep 26, 2017 at 10:23:55AM -0700, Mark Dilger wrote:

The comment that I think needs updating is:

# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256",
# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert".

The "md5" option no longer works, as discussed in other threads.

Uh, I think that "md5" still works just fine.

Yes, sorry for the noise.

I was under the impression that md5 was removed for this release, per other
threads that I must not have followed closely enough.

--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

#5Michael Paquier
michael.paquier@gmail.com
In reply to: Mark Dilger (#4)
Re: md5 still listed as an option in pg_hba.conf.sample

On Wed, Sep 27, 2017 at 2:41 AM, Mark Dilger <hornschnorter@gmail.com> wrote:

I was under the impression that md5 was removed for this release, per other
threads that I must not have followed closely enough.

md5 is still present, its configuration in pg_hba.conf and
password_encryption are still here. "plain" is what has been removed.
--
Michael

--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

#6Peter Eisentraut
peter.eisentraut@2ndquadrant.com
In reply to: Michael Paquier (#5)
Re: md5 still listed as an option in pg_hba.conf.sample

On 9/26/17 18:39, Michael Paquier wrote:

On Wed, Sep 27, 2017 at 2:41 AM, Mark Dilger <hornschnorter@gmail.com> wrote:

I was under the impression that md5 was removed for this release, per other
threads that I must not have followed closely enough.

md5 is still present, its configuration in pg_hba.conf and
password_encryption are still here. "plain" is what has been removed.

More precisely, the ability to store passwords in plain text in
pg_authid has been removed. You can still use the authentication method
"password" that sends passwords in plain text over the wire.

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers