Skip to main content

How to modify authentication method priority

  • March 15, 2021
  • 1 reply
  • 3 views

raulk89
Forum|alt.badge.img+2

Hi
Vertica 10.1
Can anyone tell me how can I change method_priority..?
When I created these 2 hash authentications, then both got nr 2.

When using the following, then auth_priority changes:
alter authentication network_passwd priority 10;
Regards
Raul

1 reply

Jim_Knicely
Forum|alt.badge.img+2
  • Participating Frequently
  • March 15, 2021

The method priority is the priority of the authentication based on the AUTH_METHOD. Vertica only considers METHOD_PRIORITY when deciding between multiple authentication methods of equal AUTH_PRIORITY.

You can not change the method priority as they are hard coded ;)

dbadmin=> SELECT auth_name, is_auth_enabled, auth_host_type, auth_method, auth_priority, method_priority, address_priority FROM client_auth ORDER BY auth_host_type, auth_priority, method_priority;
    auth_name     | is_auth_enabled | auth_host_type | auth_method | auth_priority | method_priority | address_priority
------------------+-----------------+----------------+-------------+---------------+-----------------+------------------
 v_dbadmin_trust  | True            | LOCAL          | TRUST       |         10000 |               0 |                0
 v_dbadmin_hash   | True            | LOCAL          | HASH        |         10000 |               2 |                0
 v_dbadmin_gss    | True            | LOCAL          | GSS         |         10000 |               5 |                0
 v_dbadmin_ldap   | True            | LOCAL          | LDAP        |         10000 |               5 |                0
 v_dbadmin_ident  | True            | LOCAL          | IDENT       |         10000 |               5 |                0
 v_dbadmin_reject | True            | LOCAL          | REJECT      |         10000 |              10 |                0
(6 rows)

See:
https://www.vertica.com/docs/10.1.x/HTML/Content/Authoring/Security/ClientAuth/PrioritiesForClientAuthenticationMethods.htm