Re: postgresql question
Mark-
Sunday, November 1, 2009, 2:57:59 AM, you wrote:
> It sounds like something that should probably be handled in the revDB
> library.
Update and resolution:
I sniffed the network traffic and found that the library is indeed
handling the md5 encryption properly for me. I was trying to hand the
revOpenDatabase command an encrypted password and the library was
encrypting it again. So the following works whether the server is
configured for "trust" or "md5":
put revOpenDatabase("postgresql", kServer, kDB, kUser, kPassword) into tDB
and looking at the network traffic shows that the library is
encrypting the password based on the salt value received from the
server.
--
-Mark Wieder
mwie...@ahsoftware.net
___
use-revolution mailing list
use-revolution@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution
Re: postgresql question
It sounds like something that should probably be handled in the revDB library. Best, Mark On 1 Nov 2009, at 01:38, Mark Wieder wrote: Mark- Saturday, October 31, 2009, 6:23:35 PM, you wrote: Mark, this thread may help (I'm pretty sure I got details wrong in the last post) http://archives.postgresql.org/pgsql-general/2002-06/msg00484.php Hmmm. Thanks. I had previously come across this one as well. http://www.postgresql.org/docs/8.0/interactive/sql-createuser.html So it looks like revOpenDatabase() isn't going to work unless I can somehow create a callback to catch the salt value, create the md5 value, and then call revOpenDatabase again. -- -Mark Wieder mwie...@ahsoftware.net ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: postgresql question
Mark- Saturday, October 31, 2009, 6:23:35 PM, you wrote: > Mark, this thread may help (I'm pretty sure I got details wrong in > the last post) > http://archives.postgresql.org/pgsql-general/2002-06/msg00484.php Hmmm. Thanks. I had previously come across this one as well. http://www.postgresql.org/docs/8.0/interactive/sql-createuser.html So it looks like revOpenDatabase() isn't going to work unless I can somehow create a callback to catch the salt value, create the md5 value, and then call revOpenDatabase again. -- -Mark Wieder mwie...@ahsoftware.net ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: postgresql question
Mark, this thread may help (I'm pretty sure I got details wrong in the last post) http://archives.postgresql.org/pgsql-general/2002-06/msg00484.php Best, Mark Smith On 1 Nov 2009, at 01:09, Mark Wieder wrote: Mark- Saturday, October 31, 2009, 5:41:04 PM, you wrote: Mark, I haven't done it either, but I read up on it a while ago - I think it involves receiving 2 salt values from the server, and is a two-step process: We have 2 salt values, salt1 and salt 2 step : put md5digest(salt1 & username & password) into tTemp put md5digest(salt2 & tTemp) into tStringtosend I can't remember if tStringtosend should be hex or base64 encoded. You may also need to prepend "md5" to tStringtosend. Thanks. Yeah, I read about prepending the "md5", but that didn't solve the problem by itself. And I'm catenating the name and password (I believe the password comes first, but since it's not working I wouldn't swear to it). If you remember where you read about the salt values, I'd love to see a url - I'll go digging myself. -- -Mark Wieder mwie...@ahsoftware.net ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: postgresql question
Mark- Saturday, October 31, 2009, 5:41:04 PM, you wrote: > Mark, I haven't done it either, but I read up on it a while ago - I > think it involves receiving 2 salt values from the server, and is a > two-step process: > We have 2 salt values, salt1 and salt 2 > step : put md5digest(salt1 & username & password) into tTemp > put md5digest(salt2 & tTemp) into tStringtosend > I can't remember if tStringtosend should be hex or base64 encoded. > You may also need to prepend "md5" to tStringtosend. Thanks. Yeah, I read about prepending the "md5", but that didn't solve the problem by itself. And I'm catenating the name and password (I believe the password comes first, but since it's not working I wouldn't swear to it). If you remember where you read about the salt values, I'd love to see a url - I'll go digging myself. -- -Mark Wieder mwie...@ahsoftware.net ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: postgresql question
Mark, I haven't done it either, but I read up on it a while ago - I think it involves receiving 2 salt values from the server, and is a two-step process: We have 2 salt values, salt1 and salt 2 step : put md5digest(salt1 & username & password) into tTemp put md5digest(salt2 & tTemp) into tStringtosend I can't remember if tStringtosend should be hex or base64 encoded. You may also need to prepend "md5" to tStringtosend. Best, Mark Smith On 31 Oct 2009, at 23:35, Mark Wieder wrote: All- Has anyone been able to connect to a postgresql database using md5 authentication? Since this is my first time trying this, I'm pretty sure the problem is on my end, but I figured I'd better ask before investing any more time on this. -- -Mark Wieder mwie...@ahsoftware.net ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
postgresql question
All- Has anyone been able to connect to a postgresql database using md5 authentication? Since this is my first time trying this, I'm pretty sure the problem is on my end, but I figured I'd better ask before investing any more time on this. -- -Mark Wieder mwie...@ahsoftware.net ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
