Re: [GENERAL] Not storing MD5 hashed passwords

2015-10-14 Thread Jeff Janes
On Wed, Oct 14, 2015 at 5:49 PM, Michael Paquier wrote: > On Thu, Oct 15, 2015 at 7:19 AM, Jeff Janes wrote: > > On Wed, Oct 14, 2015 at 1:41 PM, John R Pierce > wrote: > >> > >> On 10/14/2015 1:31 PM, Quiroga, Damian wrote: > >> > >> > >> > >> Does postgres support other (stronger) hashing alg

Re: [GENERAL] Not storing MD5 hashed passwords

2015-10-14 Thread Michael Paquier
On Thu, Oct 15, 2015 at 7:19 AM, Jeff Janes wrote: > On Wed, Oct 14, 2015 at 1:41 PM, John R Pierce wrote: >> >> On 10/14/2015 1:31 PM, Quiroga, Damian wrote: >> >> >> >> Does postgres support other (stronger) hashing algorithms than MD5 to >> store the database passwords at disk? >> >> If not, i

Re: [GENERAL] Not storing MD5 hashed passwords

2015-10-14 Thread Quiroga, Damian
Excellent answers. Thanks everyone. From: pgsql-general-ow...@postgresql.org [mailto:pgsql-general-ow...@postgresql.org] On Behalf Of Jeff Janes Sent: Wednesday, October 14, 2015 7:19 PM To: John R Pierce Cc: pgsql-general@postgresql.org Subject: Re: [GENERAL] Not storing MD5 hashed passwords

Re: [GENERAL] Not storing MD5 hashed passwords

2015-10-14 Thread Jeff Janes
On Wed, Oct 14, 2015 at 1:41 PM, John R Pierce wrote: > On 10/14/2015 1:31 PM, Quiroga, Damian wrote: > > > > Does postgres support other (stronger) hashing algorithms than MD5 to > store the database passwords at disk? > > If not, is there any plan to move away from MD5? > > There are proposals

Re: [GENERAL] Not storing MD5 hashed passwords

2015-10-14 Thread Joshua D. Drake
On 10/14/2015 01:31 PM, Quiroga, Damian wrote: Hi, In case someone knows… Does postgres support other (stronger) hashing algorithms than MD5 to store the database passwords at disk? No. If not, is there any plan to move away from MD5? Not currently although it has been mentioned. However

Re: [GENERAL] Not storing MD5 hashed passwords

2015-10-14 Thread John R Pierce
On 10/14/2015 1:31 PM, Quiroga, Damian wrote: Does postgres support other (stronger) hashing algorithms than MD5 to store the database passwords at disk? If not, is there any plan to move away from MD5? if you can read the password database, you already have superuser access to the full d

[GENERAL] Not storing MD5 hashed passwords

2015-10-14 Thread Quiroga, Damian
Hi, In case someone knows... Does postgres support other (stronger) hashing algorithms than MD5 to store the database passwords at disk? If not, is there any plan to move away from MD5? Thanks, Damian