Re: Password Encryption and Connection Issues

2025-07-09 Thread Greg Sabino Mullane
> Best solution: Upgrade everyone to scram, then change md5 to scram in > pg_hba.conf and never look back. > To expand more on the "upgrade everyone to scram", that means force all users to set a new password while using scram (which should be the default). You can do it yourself by getting a list

Re: Password Encryption and Connection Issues

2025-07-09 Thread Ron Johnson
On Wed, Jul 9, 2025 at 11:26 AM David G. Johnston < david.g.johns...@gmail.com> wrote: > On Wed, Jul 9, 2025 at 8:09 AM Ron Johnson > wrote: > >> That requires setting the password to null and then recreating the >> password, no? >> > > You might want to verify that claim, and suggest a doc patch

Re: Password Encryption and Connection Issues

2025-07-09 Thread Laurenz Albe
On Wed, 2025-07-09 at 11:09 -0400, Ron Johnson wrote: > > Best solution: Upgrade everyone to scram, then change md5 to scram > > in pg_hba.conf and never look back. > > That requires setting the password to null and then recreating the > password, no?  Otherwise IIRC, changing an md5 password leav

Re: Password Encryption and Connection Issues

2025-07-09 Thread David G. Johnston
On Wed, Jul 9, 2025 at 8:09 AM Ron Johnson wrote: > That requires setting the password to null and then recreating the > password, no? > You might want to verify that claim, and suggest a doc patch or bug fix if you find it to be true - I sure don't see anything that remotely suggests this. Dav

Re: Password Encryption and Connection Issues

2025-07-09 Thread Ron Johnson
On Wed, Jul 9, 2025 at 11:11 AM Adrian Klaver wrote: > On 7/9/25 06:56, Alpaslan AKDAĞ wrote: > > Hello all > > > > > As a result, some users are able to connect, while others cannot. > > What client is being used and what version of said client? > This is a salient point:clients from the pre-PG

Re: Password Encryption and Connection Issues

2025-07-09 Thread Adrian Klaver
On 7/9/25 06:56, Alpaslan AKDAĞ wrote: Hello all As a result, some users are able to connect, while others cannot. What client is being used and what version of said client? Best regards, Alpaslan -- Adrian Klaver adrian.kla...@aklaver.com

Re: Password Encryption and Connection Issues

2025-07-09 Thread Ron Johnson
On Wed, Jul 9, 2025 at 10:59 AM Greg Sabino Mullane wrote: > On Wed, Jul 9, 2025 at 9:57 AM Alpaslan AKDAĞ > wrote: > >> Is it expected behavior that users created with scram-sha-256 passwords >> can still connect via md5 in pg_hba.conf? > > > Yes. From the docs: > >> To ease transition from the

Re: Password Encryption and Connection Issues

2025-07-09 Thread Greg Sabino Mullane
On Wed, Jul 9, 2025 at 9:57 AM Alpaslan AKDAĞ wrote: > Is it expected behavior that users created with scram-sha-256 passwords > can still connect via md5 in pg_hba.conf? Yes. From the docs: > To ease transition from the md5 method to the newer SCRAM method, if md5 is > specified as a method i

Re: Password Encryption and Connection Issues

2025-07-09 Thread David G. Johnston
On Wed, Jul 9, 2025 at 6:57 AM Alpaslan AKDAĞ wrote: > >1. In such a case, what would be the recommended approach or best >practice to follow during upgrades in order to avoid this kind of issue? > > This is all described quite clearly in the documentation, including the upgrade procedure

Re: Password encryption

2018-04-15 Thread Adrian Klaver
On 04/15/2018 05:22 PM, Azimuddin Mohammed wrote: Hello, Is there a way I can encrypt the default password column of db user password. I know by default the password is encrypted as md5, can we encrypt that of shadow column for password? Are you talking about this view?: https://www.postgres