Re: Fwd: Change the auth. postgresql and GIS

On 11/23/22 02:23, Nikolas Hanry wrote:
> 
> Dear Community,

Comments inline below.
> 
> we tried to change the auth. in our postgresql environment (PostgreSQL V.11)
> from MD5 to SCRUM SHA 256
> 
>   - stop the services and killed all active connections
> - changed with alter and set pw the editor user to sha (psql)

a) What is password_encryption set to in postgresql.conf?

b) What was the exact ALTER command?

c) What is meant by editor user?



> - checked if the pw changes successfull (psql and pg4admin)

Check how?

> - tried to open new document from GIS desktop and edit --> error msg. 
> connection not available

a) Post the error message.

b) What is GIS desktop?

> - after few minutes the pw synchonized and changed  automatically back

How did you determine the password was changed back?

> 
> My questions are:
> Is it possible to work with GIS files (desktop and web) after pw changes 
> to SHA 256? We are handling with this issue and don't want to change it 
> directly for gisadmin (owner all db's) either with the postgres user
> 
> Does the changes revert back automatically to MD5 after a while due 
> synchronization? In our test environment tried the same way, although 
> the only difference was that we changed as well pg_hba_conf as well
> host     postgres      all        172.xxx.xxx.83/32   scram-sha-256
>   and Type       DB  USER      ADDRESS     METHOD    --> trust and 
> scram-sha-256 overall.

What are the settings in pg_hba.conf in the production setup?

> 
> Many thanks in advance
> Best Regards
> Nikola Lubenov
> 
> 
> 

-- 
Adrian Klaver
adrian.klaver@aklaver.com