The documentation for the pg_authid system catalog and the
pg_shadow system view indicates that passwords might be stored in
cleartext, but that hasn't been possible for some time.
Oversight in commit
eb61136dc7 .
Reviewed-by: Michael Paquier
Discussion: https://postgr.es/m/aD2yKkZro4nbl5ol%40nathan
Backpatch-through: 13
rolpassword text
- Password (possibly encrypted) ; null if none. The format depends
+ Encrypted password ; null if none. The format depends
on the form of encryption used.
ServerKey are in Base64 encoded format. This format is
the same as that specified by
RFC 5803 .
-
- A password that does not follow either of those formats is assumed to be
- unencrypted.
-
passwd text
- Password (possibly encrypted) ; null if none. See
+ Encrypted password ; null if none. See
pg_authid
for details of how encrypted passwords are stored.