Re: MD5 password issue

Andreas Wenk wrote:

> Yes thats correct with the IP address range. Maybe I did not understand
> the auth concept yet. I thought, that with METHOD set to md5, a md5
> hashed password is required. The password is submitted with the PHP 5
> pg_connect function - as plain text.

It is specified to pg_connect as plain text, but it is sent over the
wire md5-hashed.

> So maybe the better question is: what is the difference between METHOD
> password and md5? As I assume now because of your answers, it has
> nothing to do with either the password is md5 hashed or not?

The difference is what travels on the wire.

--
Alvaro Herrera                                http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support