summaryrefslogtreecommitdiff
path: root/doc/src
diff options
context:
space:
mode:
authorBruce Momjian2004-05-06 16:59:16 +0000
committerBruce Momjian2004-05-06 16:59:16 +0000
commit22a2c4b576fe1423382e68b418d954208555ba34 (patch)
treedc29530a5d28556bdbdd547f92b10eb1a4fcd8c2 /doc/src
parentd8f6973df383929860ae4d0657c93177b87005db (diff)
Erase MD5 user passwords when a user is renamed because the username is
used as salt for the MD5 password.
Diffstat (limited to 'doc/src')
-rw-r--r--doc/src/sgml/ref/alter_user.sgml5
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/src/sgml/ref/alter_user.sgml b/doc/src/sgml/ref/alter_user.sgml
index 4af08885094..e74da13c877 100644
--- a/doc/src/sgml/ref/alter_user.sgml
+++ b/doc/src/sgml/ref/alter_user.sgml
@@ -1,5 +1,5 @@
<!--
-$PostgreSQL: pgsql/doc/src/sgml/ref/alter_user.sgml,v 1.32 2003/11/29 19:51:38 pgsql Exp $
+$PostgreSQL: pgsql/doc/src/sgml/ref/alter_user.sgml,v 1.33 2004/05/06 16:59:16 momjian Exp $
PostgreSQL documentation
-->
@@ -57,6 +57,9 @@ ALTER USER <replaceable class="PARAMETER">name</replaceable> RESET <replaceable>
The second variant changes the name of the user. Only a database
superuser can rename user accounts. The session user cannot be
renamed. (Connect as a different user if you need to do that.)
+ Because <literal>MD5</>-encrypted passwords use the username as
+ cryptographic salt, renaming a user clears their <literal>MD5</>
+ password.
</para>
<para>