Horton
Menu

Thread

  1. JDBC Driver Authentication Bug

    PostgreSQL Bugs List <pgsql-bugs@postgresql.org> — 2000-12-16T04:04:38Z

    Cheeren Shieh (cheeren@cheeren.com) reports a bug with a severity of 2
The lower the number the more severe it is.

Short Description
JDBC Driver Authentication Bug

Long Description
If the userid is valid, even though null password or wrong password  is sent to server with JDBC Driver, the authentication still pass!
What is a terrible bug!
The JDBC Driver is "jdbc7.0-1.2.jar".

Sample Code


No file was uploaded with this report

  2. Re: JDBC Driver Authentication Bug

    Nabil Sayegh <nsmail@sayegh.de> — 2000-12-16T11:45:03Z

    pgsql-bugs@postgresql.org wrote:
> If the userid is valid, even though null password or wrong password  is sent to server with JDBC Driver, the authentication still pass!
> What is a terrible bug!

Check ~postgres/data/pg_hba.conf
By default AuthenticationType for localhost connections is TRUST. You
have to set it
to PASSWORD

cu
--
 Nabil Sayegh

  3. Re: JDBC Driver Authentication Bug

    Peter T Mount <peter@retep.org.uk> — 2001-01-10T22:22:04Z

    Sorry for the delay.

What is the setting in pg_hba.conf? It sounds like this is set to trust
which would produce this affect.

Peter

----- Original Message -----
From: <pgsql-bugs@postgresql.org>
To: <pgsql-bugs@postgresql.org>
Sent: Saturday, December 16, 2000 4:04 AM
Subject: [BUGS] JDBC Driver Authentication Bug


> Cheeren Shieh (cheeren@cheeren.com) reports a bug with a severity of 2
> The lower the number the more severe it is.
>
> Short Description
> JDBC Driver Authentication Bug
>
> Long Description
> If the userid is valid, even though null password or wrong password  is
sent to server with JDBC Driver, the authentication still pass!
> What is a terrible bug!
> The JDBC Driver is "jdbc7.0-1.2.jar".
>
> Sample Code
>
>
> No file was uploaded with this report
>