Re: [SQL] MAY I HAVE YOUR ASSISTANCE

2008-09-01 Thread Gary Chambers
> The weakness of this solution is that your password might be send in the > clear through the network as the encription ocurrs in the database. I > suggest the encryption be enforced at the application or secure the > connection with ssl. Absolutely -- and understood. I should have been more spe

Re: [SQL] MAY I HAVE YOUR ASSISTANCE

2008-09-01 Thread Fernando Hevia
> -Mensaje original- > De: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] En nombre de Gary Chambers > Enviado el: Lunes, 01 de Septiembre de 2008 11:31 > Para: D'Arcy J.M. Cain > CC: [EMAIL PROTECTED]; pgsql-sql@postgresql.org > Asunto: Re: [SQL] MAY I HAVE YOUR ASSISTANCE > > >> I hav

Re: [SQL] MAY I HAVE YOUR ASSISTANCE

2008-09-01 Thread Gary Chambers
>> I have one problem with the user table. I want to hide the password for the >> users. Here's what I did, which requires using the contrib/pgcrypto extension: CREATE FUNCTION encryptpw() RETURNS TRIGGER AS $encryptpw$ BEGIN NEW.password = CRYPT(NEW.password, GEN_SALT('md5')); R

Re: [SQL] MAY I HAVE YOUR ASSISTANCE

2008-09-01 Thread D'Arcy J.M. Cain
On Mon, 1 Sep 2008 07:03:51 + (GMT) James Kitambara <[EMAIL PROTECTED]> wrote: >   > Please members of the PGSQL-SQL, >   > I have one problem with the user table. I want to hide the password for the > users. Look in the contrib directory for the chkpass type. It uses DES encryption but if y

Re: [SQL] MAY I HAVE YOUR ASSISTANCE

2008-09-01 Thread Scott Marlowe
On Mon, Sep 1, 2008 at 1:03 AM, James Kitambara <[EMAIL PROTECTED]> wrote: > > Please members of the PGSQL-SQL, > > I have one problem with the user table. I want to hide the password for the > users. > > The table format is: > > user ( user_id, user_name, password) > > But I want the password to b

[SQL] MAY I HAVE YOUR ASSISTANCE

2008-09-01 Thread James Kitambara
  Please members of the PGSQL-SQL,   I have one problem with the user table. I want to hide the password for the users.   The table format is:   user ( user_id, user_name, password)   But I want the password to be encrypted so that when other users send the query:SELECT * FROM USER; The password