[pgpool-general: 4010] Re: Import MD5 password hashes

[Joshua D. Drake]

On 08/27/2015 04:35 AM, Pablo Sanchez wrote:
> [ Comments below, in-line ]
>
>
> On 08/25/2015 10:41 PM, James Sewell wrote:
>
> Hi James,
>
>> If there isn't any plan in the near future I might write a trigger
>> based solution which can be added - would there be any interest in
>> this?
>
> Authentication has become a big issue for my client so I'm very
> interested in what you find/discover.
>
> I was about to embark on what PGPool currently provides
> (e.g. pool_password) for authentication.  At the moment, I don't like
> the security hole.  This may be self-inflicted though.

I am not sure how it is anymore a security hole than /etc/passwd, 
/etc/shadow. I do think it would be great if it could just auth via 
PostgreSQL proper though.

JD


-- 
Command Prompt, Inc. - http://www.commandprompt.com/  503-667-4564
PostgreSQL Centered full stack support, consulting and development.
Announcing "I'm offended" is basically telling the world you can't
control your own emotions, so everyone else should do it for you.