Re: Upgrading password encryption from md5 to scram-sh-256
| От | Holger Jakobs |
|---|---|
| Тема | Re: Upgrading password encryption from md5 to scram-sh-256 |
| Дата | |
| Msg-id | 024F93BC-DB7C-4E00-8D46-5D7033CB0929@jakobs.com обсуждение исходный текст |
| Ответ на | Upgrading password encryption from md5 to scram-sh-256 (Nikhil Shetty <nikhil.dba04@gmail.com>) |
| Список | pgsql-admin |
Am 28. Mai 2021 15:27:43 MESZ schrieb Nikhil Shetty <nikhil.dba04@gmail.com>:
Hi Team,Just a quick checkAs per documentation, for upgrading password encryption from md5 to scram-sha-256, we have to set password_encryption to scram-sha-256, reset the user password and then change in pg_hba.conf.Is there any other way to do this without changing the password? if there are a lot of login users in the database it becomes difficult and it may incur downtime as well.I see there is a way the users can do it by themselves but still will incur some downtime.Thanks and Regards,Nikhil
It's no problem to leave the setting at md5 as this accepts the new scram passwords as well.
Just check after a while whether all passwords have been changed to scram.
Since there is no way of retrieving a password in clear it's also impossible to change them to scram automatically.
Hope this helps.
--
Holger Jakobs, Bergisch Gladbach
+49 178 9759012
- sent from mobile, therefore short -
В списке pgsql-admin по дате отправления: