Password authentication methods in PostgreSQL - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of password authentication methods in PostgreSQL?

Password authentication methods in PostgreSQL control how users prove their identity when connecting to the database, ensuring only authorized users can access it.

intermediate

Explain the difference between md5 and scram-sha-256 authentication methods.

md5 hashes passwords using MD5 algorithm but is less secure. scram-sha-256 uses a stronger SHA-256 hashing with salting and is recommended for better security.

beginner

What is the role of the pg_hba.conf file in password authentication?

The pg_hba.conf file defines which authentication methods PostgreSQL uses for different users, databases, and connection types.

intermediate

How does password authentication differ from md5 in PostgreSQL?

password sends the password in clear text (not recommended), while md5 sends a hashed password, providing better security over the network.

advanced

Why is scram-sha-256 considered more secure than md5 for password authentication?

scram-sha-256 uses salted hashing and multiple iterations making it resistant to dictionary and replay attacks, unlike md5 which is vulnerable to these attacks.

Which PostgreSQL password authentication method uses SHA-256 hashing?

A scram-sha-256

B md5

C password

D trust

scram-sha-256 uses SHA-256 hashing, which is stronger than MD5.

Where do you configure the password authentication methods in PostgreSQL?

A pg_password.conf

B postgresql.conf

C pg_ident.conf

D pg_hba.conf

The pg_hba.conf file controls authentication methods for connections.

What does the password authentication method do in PostgreSQL?

A Sends hashed password with MD5

B Sends password in clear text

C Uses SCRAM with SHA-256

D Allows connection without password

password sends the password in clear text, which is insecure.

Which authentication method is recommended for better security in PostgreSQL?

A ident

B trust

C scram-sha-256

D password

scram-sha-256 is recommended for secure password authentication.

What is a key benefit of using scram-sha-256 over md5?

A Resistance to replay attacks

B Sends password in plain text

C No password required

D Uses MD5 hashing

scram-sha-256 provides resistance to replay and dictionary attacks.

Describe how PostgreSQL uses password authentication methods to secure database connections.

Think about how PostgreSQL checks user identity and protects passwords.

Explain why scram-sha-256 is preferred over md5 for password authentication in PostgreSQL.

Focus on the security improvements in the hashing method.