Re: ODBC and crypted passwords

cf http://asg.web.cmu.edu/sasl/    ?

On Wed, Apr 12, 2000 at 11:59:19AM +0100, Peter Mount wrote:
> Thats why I said its for the future :-)
> 
> I always use crypt if it's going outside the server, so some form of
> encrypted transport is required. Anyhow, the main reason I mentioned
> PAM, is that not every platform would have a password file (NT for
> example, although you can configure one in cygwin).
> 
> Peter
> 
> -- 
> Peter Mount
> Enterprise Support
> Maidstone Borough Council
> Any views stated are my own, and not those of Maidstone Borough Council.
> 
> 
> 
> -----Original Message-----
> From: Hannu Krosing [mailto:hannu@tm.ee]
> Sent: Wednesday, April 12, 2000 10:47 AM
> To: Peter Mount
> Cc: 'Henk van Lingen'; pgsql-interfaces@postgresql.org
> Subject: Re: [INTERFACES] ODBC and crypted passwords
> 
> 
> Peter Mount wrote:
> > 
> > One thing that may be useful, is not to check against the unix
> password
> > file, but to use PAM. That way, you could even authenticate against
> the
> > dreadded NT accounts, unix password file, dbm file etc...
> > 
> > Anyhow, this is something to think about for the future ;-)
> 
> IMHO this defeats the purpose of crypt - not to send plaintext passwords
> 
> over the net.
> 
> OTOH, it could be done over a secure (SSL/TLS) channel of course.
> 
> -----------
> Hannu