Project

General

Profile

Actions
Copy link

Feature #37297

closed

Default PostgreSQL password encryption to SCRAM

Added by Ewoud Kohl van Wijngaarden 8 months ago. Updated 5 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Ewoud Kohl van Wijngaarden
Category:
foreman-installer script
Target version:
-
Difficulty:
Triaged:
Yes
Bugzilla link:
2065903
Pull request:
https://github.com/theforeman/foreman-installer/pull/924
Fixed in Releases:
Foreman - 3.11.0
Found in Releases:
Red Hat JIRA:

Description

PostgreSQL supports SCRAM encryption and PostgreSQL 14 will also default to this. Moving to it sooner helps removing md5 from the system.

https://github.com/puppetlabs/puppetlabs-postgresql/pull/1313 added some initial SCRAM support to the installer (foreman-installer 3.3) and https://github.com/puppetlabs/puppetlabs-postgresql/pull/1406 changes the default encryption to SCRAM on PostgreSQL 14, reflecting PostgreSQL defaults (foreman-installer 3.9). It should be possible to set the installer wide default to SCRAM now using Hiera.

Actions
Copy link

Also available in: Atom PDF