database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-07-28 23:42:10 +03:00
Code Activity

Erase MD5 user passwords when a user is renamed because the username is

Browse Source 
used as salt for the MD5 password.
This commit is contained in:
Bruce Momjian
2004-05-06 16:59:16 +00:00
parent d8f6973df3
commit 22a2c4b576
2 changed files with 46 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
doc/src/sgml/ref/alter_user.sgml
View File

@ -1,5 +1,5 @@
<!--
$PostgreSQL: pgsql/doc/src/sgml/ref/alter_user.sgml,v 1.32 2003/11/29 19:51:38 pgsql Exp $
$PostgreSQL: pgsql/doc/src/sgml/ref/alter_user.sgml,v 1.33 2004/05/06 16:59:16 momjian Exp $
PostgreSQL documentation
-->
@ -57,6 +57,9 @@ ALTER USER <replaceable class="PARAMETER">name</replaceable> RESET <replaceable>
The second variant changes the name of the user. Only a database
superuser can rename user accounts. The session user cannot be
renamed. (Connect as a different user if you need to do that.)
Because <literal>MD5</>-encrypted passwords use the username as
cryptographic salt, renaming a user clears their <literal>MD5</>
password.
</para>
<para>