public inbox for
 help / color / mirror / Atom feed
From: Fernando Nasser <>
To: Fernando Nasser <>
Cc: Wei Tjioe <>,
Subject: Re: problem with Configuring a Connection to a Database using Visual Explain
Date: Fri, 03 Oct 2003 00:41:00 -0000	[thread overview]
Message-ID: <> (raw)
In-Reply-To: <>

Fernando Nasser wrote:
> Wei,
> The client side (in this case JDBC) is not aware of how the server 
> stores it's passwords.  They are sent clear text with either 'password' 
> or 'md5' -- they are stored encrypted in the server.  If you need more 
> security and don't want clear text passwords on the network make the 
> connection using SSL.  The JDBC driver supports SSL connection for some 
> time now.

Sorry, I was thinking of crypt.  I forgot that we now have support for 
md5 and, of course, this means that the passwords may be encrypted 
before being sent over the wire.  In which case you don't need SSL (if 
just for that).

But the detection if the JDBC driver has to send md5 or clear text 
passwords (for password _and_ crypt) is done automatically.  The server 
tells the client how it wants the password.  The client program always 
pass it to JDBC as clear text.

Please note that JDBC drivers before 7.3 had a bug in md5 password 
encription.  I think it would only affect people with a different 
encoding in their locale, but to be in the safe side you should use 
drivers 7.3 on when using md5.

Your pg_hba file seems to be in a very old format (7.1.x perhaps).  What 
versions of PostgreSQL and of the JDBC driver are you using?


Fernando Nasser
Red Hat Canada Ltd.                     E-Mail:
2323 Yonge Street, Suite #300
Toronto, Ontario   M4P 2C9

  parent reply	other threads:[~2003-10-03  0:41 UTC|newest]

Thread overview: 11+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-10-02  1:39 Wei Tjioe
2003-10-02 20:07 ` Fernando Nasser
2003-10-02 20:28   ` Wei Tjioe
2003-10-02 21:13     ` Fernando Nasser
2003-10-02 22:44       ` Wei Tjioe
2003-10-03  0:41   ` Fernando Nasser [this message]
2003-10-03  1:16     ` Wei Tjioe
2003-10-03  1:53       ` Fernando Nasser
2003-10-03  2:21         ` Wei Tjioe
  -- strict thread matches above, loose matches on Subject: below --
2003-09-18  8:25 huwang wang
2003-09-18 14:36 ` Patrick Macdonald

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \ \ \ \ \

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).