Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sql,server: support SCRAM authentication for SQL sessions #12793

Closed
cockroach-teamcity opened this issue Jan 21, 2022 · 1 comment
Closed

sql,server: support SCRAM authentication for SQL sessions #12793

cockroach-teamcity opened this issue Jan 21, 2022 · 1 comment

Comments

@cockroach-teamcity
Copy link
Member

cockroach-teamcity commented Jan 21, 2022

Exalate commented:

cockroachdb/cockroach#74301 --- Release note (backward-incompatible change): The environment variable that controls the max amount of CPU that can be taken by password hash computations during authentication was renamed from COCKROACH_MAX_BCRYPT_CONCURRENCY to COCKROACH_MAX_PW_HASH_COMPUTE_CONCURRENCY. Its semantics remain unchanged. Release note (security update): CockroachDB is now able to authenticate users via the web UI and through SQL sessions when the client provides a cleartext password and the stored credentials are encoded using the SCRAM-SHA-256 algorithm. (Note: support for a SCRAM authentication flow is a separate feature and is not the target of this release note.) In particular, for SQL client sessions it makes it possible to use the authentication methods password (cleartext passwords), and cert-password (TLS client cert or cleartext password) with either CRDB-BCRYPT or SCRAM-SHA-256 stored credentials. Previously, only CRDB-BCRYPT stored credentials were supported for cleartext password authentication.

Jira Issue: DOC-2362

@rafiss
Copy link
Contributor

rafiss commented Mar 2, 2023

covered by #12792

@rafiss rafiss closed this as completed Mar 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants