Re: Using md5 authentication

Поиск
Список
Период
Сортировка
От ktm@rice.edu
Тема Re: Using md5 authentication
Дата
Msg-id 20130731125206.GY3001@aart.rice.edu
обсуждение исходный текст
Ответ на Re: Using md5 authentication  (Philip Poloczek <Philip.Poloczek@dlr.de>)
Ответы really novice with Postgres !  (Jean MAURICE <mauricejea@numericable.fr>)
Список pgsql-novice
On Wed, Jul 31, 2013 at 10:25:03AM +0200, Philip Poloczek wrote:
> It's kind of secure. These passwords are very sensitive, i don't
> even want administrators to read these passwords in plain text.
> Maybe i should use ldap.
>

Hi Philip,

Storing a hash of a password that you could use is the same as
storing the plain text password with the same security concerns.
As you suspect, using something like ldap, gssapi or a multi-
factor authentication scheme is much, much better.

Regards,
Ken


В списке pgsql-novice по дате отправления:

Предыдущее
От: Philip Poloczek
Дата:
Сообщение: Re: Using md5 authentication
Следующее
От: Jean MAURICE
Дата:
Сообщение: really novice with Postgres !