User authentication bug?

Поиск
Список
Период
Сортировка
От Maarten Boekhold
Тема User authentication bug?
Дата
Msg-id Pine.SUN.3.91.980731211248.20242A-100000@dutepp0.et.tudelft.nl
обсуждение исходный текст
Ответы Re: [HACKERS] User authentication bug?
Re: [HACKERS] User authentication bug?
Список pgsql-hackers
Hi,

I was having trouble with user authentication, so I submerged myself in
the source (UTSL ie. Use The Source luke ;) to see if I could figure out
what I was doing wrong:

While using passwords stored in pg_shadow (pg_user), I cannot connect to
the backend using the 'password' authentication, I can connect using 'crypt'.

Now, I found from the source that the routines that do crypt checking
also seem to support plain passwords. But this code is never used,
because apparently uaCrypt is never set for 'password', while my
understanding is that this should be set when there is no password-file
specified in pg_hba.conf.

AlthoughcCheckPassword() seems to provide for this, it appears not to be
working.

Anybody knows what's going on here? I intent to fire up a debugger here
to see if I can figure out what's wrong, but thought asking first doesn't
do any harm.

btw. is there anywhere a good description on how control flows during
this phase of connecting? It all looks very difficult, with lots of
function pointer being passed around etc.

Maarten

_____________________________________________________________________________
| TU Delft, The Netherlands, Faculty of Information Technology and Systems  |
|                   Department of Electrical Engineering                    |
|           Computer Architecture and Digital Technique section             |
|                          M.Boekhold@et.tudelft.nl                         |
-----------------------------------------------------------------------------


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Vince Vielhaber
Дата:
Сообщение: Re: [HACKERS] OR clause status report - working
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: [HACKERS] User authentication bug?