-
Notifications
You must be signed in to change notification settings - Fork 4.1k
security: support for setting passwords securely in the sql client #48543
Copy link
Copy link
Closed
Labels
A-authenticationPertains to authn subsystemsPertains to authn subsystemsA-cc-enablementPertains to current CC production issues or short-term projectsPertains to current CC production issues or short-term projectsA-cli-clientCLI commands that pertain to using SQL featuresCLI commands that pertain to using SQL featuresA-securityC-enhancementSolution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)T-sql-foundationsSQL Foundations Team (formerly SQL Schema + SQL Sessions)SQL Foundations Team (formerly SQL Schema + SQL Sessions)
Description
We should provide the ability to streamline the assignment of secure passwords with client-side hashing in the sql client.
As it stands today, CREATE USER 'foo' WITH PASSWORD 'bar'; and similar commands may result in logging of security primitives which may be surprising and also undesirable.
psql does this through the client-side \password command referenced here: https://www.postgresql.org/docs/12/auth-password.html
Additional conversations and workaround for psql for context
- psql-admin mailing list discussion about logging passwords: https://www.postgresql.org/message-id/CAHJZqBDe1-oiYtdh5pcWLAhr3jsDMFQg4miv3PYADH3YWKqZ2w%40mail.gmail.com
- psql with md5 auth: https://community.pivotal.io/s/article/How-to-Create-a-User-with-an-Encrypted-Password?language=en_US
Jira issue: CRDB-6322
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
A-authenticationPertains to authn subsystemsPertains to authn subsystemsA-cc-enablementPertains to current CC production issues or short-term projectsPertains to current CC production issues or short-term projectsA-cli-clientCLI commands that pertain to using SQL featuresCLI commands that pertain to using SQL featuresA-securityC-enhancementSolution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)T-sql-foundationsSQL Foundations Team (formerly SQL Schema + SQL Sessions)SQL Foundations Team (formerly SQL Schema + SQL Sessions)