Re: wrong password accepted

Поиск
Список
Период
Сортировка
От Sam Barnett-Cormack
Тема Re: wrong password accepted
Дата
Msg-id Pine.LNX.4.50.0308291421200.25177-100000@short.lancs.ac.uk
обсуждение исходный текст
Ответ на wrong password accepted  (Raphael Bauduin <raphael@be.easynet.net>)
Ответы Re: wrong password accepted  (Raphael Bauduin <raphael@be.easynet.net>)
Список pgsql-admin
On Fri, 29 Aug 2003, Raphael Bauduin wrote:

> Hi,
>
> this is a strange situation I just discovered on a postgresql
> 7.2.1-2woody2 (Debian as you can see...). I use pg_hba to specify
> password ahtentications for clients. HEre's the line:
> host         all         127.0.0.1    255.255.255.0       password  pass-file
>
> I just discovered that when I use the correct password to whach I append
> text, it is accepted (though this is not correct...)
> For example, if my password is postgres, the following will also be
> accepted: postgresql, postgresblabla, postgres2 ...... but it will
> reject postgrex eg.

If the password mechanism uses standard crypt() passwords, then only the
first eight letters count. It just happens that postgres is eight
letters long.

This has been a public service educated guess.

--

Sam Barnett-Cormack
Software Developer                           |  Student of Physics & Maths
UK Mirror Service (http://www.mirror.ac.uk)  |  Lancaster University

В списке pgsql-admin по дате отправления:

Предыдущее
От: Raphael Bauduin
Дата:
Сообщение: wrong password accepted
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Can not deleted all record