diff options
author | Bruce Momjian | 2004-05-06 16:59:16 +0000 |
---|---|---|
committer | Bruce Momjian | 2004-05-06 16:59:16 +0000 |
commit | 22a2c4b576fe1423382e68b418d954208555ba34 (patch) | |
tree | dc29530a5d28556bdbdd547f92b10eb1a4fcd8c2 /doc/src | |
parent | d8f6973df383929860ae4d0657c93177b87005db (diff) |
Erase MD5 user passwords when a user is renamed because the username is
used as salt for the MD5 password.
Diffstat (limited to 'doc/src')
-rw-r--r-- | doc/src/sgml/ref/alter_user.sgml | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/src/sgml/ref/alter_user.sgml b/doc/src/sgml/ref/alter_user.sgml index 4af08885094..e74da13c877 100644 --- a/doc/src/sgml/ref/alter_user.sgml +++ b/doc/src/sgml/ref/alter_user.sgml @@ -1,5 +1,5 @@ <!-- -$PostgreSQL: pgsql/doc/src/sgml/ref/alter_user.sgml,v 1.32 2003/11/29 19:51:38 pgsql Exp $ +$PostgreSQL: pgsql/doc/src/sgml/ref/alter_user.sgml,v 1.33 2004/05/06 16:59:16 momjian Exp $ PostgreSQL documentation --> @@ -57,6 +57,9 @@ ALTER USER <replaceable class="PARAMETER">name</replaceable> RESET <replaceable> The second variant changes the name of the user. Only a database superuser can rename user accounts. The session user cannot be renamed. (Connect as a different user if you need to do that.) + Because <literal>MD5</>-encrypted passwords use the username as + cryptographic salt, renaming a user clears their <literal>MD5</> + password. </para> <para> |