diff options
| author | Bruce Momjian <bruce@momjian.us> | 2011-10-13 20:48:50 -0400 |
|---|---|---|
| committer | Bruce Momjian <bruce@momjian.us> | 2011-10-13 20:48:50 -0400 |
| commit | ad30d366424aee9736f7a71be87e6941d7dd12df (patch) | |
| tree | d203bf74e80571d47fe5de8e55476038b52d09a8 /doc/src | |
| parent | 0180bd6180511875db046bf8ddcaa633a2952dfd (diff) | |
| download | postgresql-ad30d366424aee9736f7a71be87e6941d7dd12df.tar.gz postgresql-ad30d366424aee9736f7a71be87e6941d7dd12df.zip | |
Document actual string that has to be returned by the client for MD5
authentication.
Report and pseudo code by Cyan Ogilvie
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/protocol.sgml | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/doc/src/sgml/protocol.sgml b/doc/src/sgml/protocol.sgml index 19c9686fff4..4fda5189709 100644 --- a/doc/src/sgml/protocol.sgml +++ b/doc/src/sgml/protocol.sgml @@ -293,10 +293,15 @@ <listitem> <para> The frontend must now send a PasswordMessage containing the - password encrypted via MD5, using the 4-character salt - specified in the AuthenticationMD5Password message. If - this is the correct password, the server responds with an - AuthenticationOk, otherwise it responds with an ErrorResponse. + password (with username) encrypted via MD5, then encrypted + again using the 4-byte random salt specified in the + AuthenticationMD5Password message. If this is the correct + password, the server responds with an AuthenticationOk, + otherwise it responds with an ErrorResponse. The actual + PasswordMessage can be computed in SQL as <literal>concat('md5', + md5(concat(md5(concat(password, username)), random-salt)))</>. + (Keep in mind the <function>md5()</> function returns its + result as a hex string.) </para> </listitem> </varlistentry> |