Horton

Re: password_encryption, default and 'plain' support

Heikki Linnakangas <hlinnaka@iki.fi>

View thread View on postgr.es
From: Heikki Linnakangas <hlinnaka@iki.fi>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Robert Haas <robertmhaas@gmail.com>, pgsql-hackers <pgsql-hackers@postgresql.org>
Date: 2017-05-04T11:37:15Z
Lists: pgsql-hackers

Attachments

On 05/03/2017 08:40 PM, Tom Lane wrote:
> The other question I can think to ask is what will happen during
> pg_upgrade, given an existing installation with one or more passwords
> stored plain.  If the answer is "silently convert to MD5", I'd be
> good with that.

Yes, it will silently convert to MD5. That happened even on earlier 
versions, if you had password_encryption=on in the new cluster (which 
was the default).

I'm planning to go ahead with the attached patch for this (removing 
password_encryption='plain' support, but keeping the default as 'md5').

- Heikki

Commits

  1. Remove support for password_encryption='off' / 'plain'.