[pgpool-general: 4549] Re: md5 authentication without pool_passwd

Gabriele Monfardini monfardini at ldpgis.it
Tue Mar 15 16:49:26 JST 2016


Hi,


> The problem with your idea is, client needs to send a clear text
> password to pgpool-II, that is regarded bad from modern security
> design's point of view.
>

maybe I'm missing something obvious here.
If hashing algorithm is the same, why pgpool cannot receive hashed password
and pass it untouched to PostgreSQL?
Best regards,

Gabriele Monfardini

-----
Gabriele Monfardini
LdP Progetti GIS
tel: 0577.531049
email: monfardini at ldpgis.it
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.sraoss.jp/pipermail/pgpool-general/attachments/20160315/a9ba00b9/attachment.html>


More information about the pgpool-general mailing list