安全版V4.5密码加密算法由SM3改为MD5

环境

系统平台：Linux x86-64 Red Hat Enterprise Linux 7
版本：4.5

文档用途

本文档用于指导瀚高数据库安全版V4.5的密码加密算法由SM3改为MD5

详细信息

1、用默认三权用户和普通用户登录数据库，修改密码加密算法并更改密码

[root@host ~]# psql -U sysdba -d highgo                

highgo=# alter system set password_encryption ='md5';                

highgo=# set password_encryption ='md5';                

highgo=# alter user sysdba with password 'xxx';                

highgo=# \q                

[root@host ~]# psql -U syssso -d highgo                

               

highgo=# set password_encryption ='md5';                

highgo=# alter user syssso with password 'xxx';                

               

highgo=# \q                

[root@host ~]# psql -U syssao -d highgo                

               

highgo=# set password_encryption ='md5';                

highgo=# alter user syssao with password 'xxx';                

highgo=# \q                

               

[root@host ~]# psql -U test -d highgo                

               

highgo=# set password_encryption ='md5';                

highgo=# alter user test with password 'xxx';                

highgo=# \q                

注：普通用户忘记密码时，可用管理员用户syssso设置密码。

2、更改.pgpass中的密码，如未配置.pgpass请忽略此步

[root@host ~]# vi ~/.pgpass                

#hostname:port:database:username:password                

localhost:5866:highgo:sysdba:xxx   

3、修改数据目录中的pg_hba.conf文件，将sm3改为md5

# TYPE  DATABASE        USER            ADDRESS                 METHOD                


               

# "local" is for Unix domain socket connections only                

local   all             all                               md5                

# IPv4 local connections                

host    all             all             127.0.0.1/32          md5                

host    all             all             0.0.0.0/0            md5                

# IPv6 local connections:                

host    all             all             ::1/128             md5                

# Allow replication connections from localhost, by a user with the                

# replication privilege.                

local   replication     all                                  md5                

host    replication     all             127.0.0.1/32             md5                

host    replication     all             ::1/128                md5                

4、重载数据库配置

[root@host data]# pg_ctl reload             

注：参数password_encryption为动态参数，文件pg_hba可动态修改，因此无需重启数据库。