--- title: "How to upgrade your Postgres passwords to SCRAM" publication: "Postgres Weekly" issue: 314 published_at: "2019-07-17" canonical_url: "https://postgresweekly.com/issues/314" --- The latest Postgres news, articles, tools, and projects. #314 — July 17, 2019 [Read on the Web](https://postgresweekly.com/issues/314) Postgres Weekly [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/sames4exo9xx1ti9ob9t.jpg)](https://info.crunchydata.com/blog/how-to-upgrade-postgresql-passwords-to-scram) [How to Upgrade Your Postgres Passwords to SCRAM](https://info.crunchydata.com/blog/how-to-upgrade-postgresql-passwords-to-scram) — Support for [SCRAM](https://en.wikipedia.org/wiki/Salted_Challenge_Response_Authentication_Mechanism) authentication was introduced in Postgres 10 and offers significant benefits over MD5. Here’s the how and why, plus how to upgrade your existing logins to using the SCRAM approach. Jonathan S. Katz ▶[Cleaning Out Crocodiles' Teeth with Postgres Indexes](https://www.youtube.com/watch?v=2l-nCkPQVuQ) — In a 40 minute talk at Postgres Open (2018), an engineer from Citus Data (now part of Microsoft) told a crocodile-themed story of all the index types in Postgres. This is a lot more educational than it sounds, you’ll learn a lot, and this is a good use of 40 minutes if you need to get your head around Postgres indexing. Louise Grandjonc [![\](https://copm.s3.amazonaws.com/547e0ba0.png)](https://resources.2ndquadrant.com/webinar-postgres-vacuuming-through-pictures) [Learn How Postgres Vacuum Tuning Enhances DB Performance](https://resources.2ndquadrant.com/webinar-postgres-vacuuming-through-pictures) — Join the Free PostgreSQL webinar: Postgres Vacuuming Through Pictures and learn key concepts of vacuum and autovacuum in PostgreSQL, Vacuum Operations, how to tune vacuum for Postgres deployment, and more. 2ndQuadrant PostgreSQL Webinars sponsor [Using ICU Collations to Avoid glibc 2.28 Data Corruption](https://www.cybertec-postgresql.com/en/icu-collations-against-glibc-2-28-data-corruption/) — This is a technical one! The newest version of the GNU C Library (2.28) made [big changes to Unicode collations](https://postgresql.verite.pro/blog/2018/08/27/glibc-upgrade.html) (collations are the rules governing how strings are compared or sorted) which could cause issues with your indexes, including corruption. Postgres uses OS-level collations by default but can also use [ICU](http://site.icu-project.org/) collations, essentially a separate, third party, cross platform set of collations, and this article digs into both why and how you’d make the switch. Laurenz Albe [PostgreSQL Conference Europe 2019 Now Open for Registrations](https://2019.pgconf.eu/) — It’s in Milan, Italy this October. Speakers won’t be selected until August (the CFP is now closed) but you’re able to get tickets now. PGConf.EU [A Look at Partitioning Enhancements in Postgres 12](https://www.2ndquadrant.com/en/blog/partitioning-enhancements-in-postgresql-12/) — Postgres 12 gets some _“pretty dramatic”_ improvements in partition selection, referential integrity improvements, and introspection. Kirk Roybal [Implementing 'Autonomous Transactions' in Postgres](https://www.cybertec-postgresql.com/en/implementing-autonomous-transactions-in-postgres/) — More familiar in the Oracle world, autonomous transactions are independent transactions that are initiated by _other_ transactions (i.e. they have a different context and don’t interfere with the ‘calling’ transaction). Postgres doesn’t have native support for this but there are two workarounds. Kaarel Moppel [Reverse Proxying to pgAdmin](https://pgsnake.blogspot.com/2019/07/reverse-proxying-to-pgadmin.html) — [pgAdmin](https://www.pgadmin.org/) is a popular Web-based admin and database management tool for Postgres. Dave Page [Indexing Documents for Full Text Search](https://pgsnake.blogspot.com/2019/06/indexing-documents-for-full-text-search.html) Dave Page [`CREATE STATISTICS`: What Is It For?](https://www.slideshare.net/fuzzycz/create-statistics-what-is-it-for-postgreslondon) — These code-rich slides from a recent talk highlight the use case for [`CREATE STATISTICS`](https://www.postgresql.org/docs/10/sql-createstatistics.html), a command introduced in Postgres 10 that can create extended statistics objects [to assist in query planning.](https://www.citusdata.com/blog/2018/03/06/postgres-planner-and-its-usage-of-statistics/) Tomas Vondra slidedeck [SQL, Python, and R. All in One Platform. Free Forever](https://mode.com/?utm_campaign=studio&utm_content=studio_20190717&utm_medium=sponsored_email&utm_source=postgresweekly) — Mode combines a SQL editor, native Python and R notebooks, and viz builder in one platform. Connect, analyze, & share. Mode sponsor ▶[How to use MongoDB and PostgreSQL in GraphQL](https://www.youtube.com/watch?v=_trOqBZMJHQ) — A demonstration of bringing various databases together (the choice of MongoDB and Postgres are reasonably arbitrary here) using the GraphQL query language, Apollo Server, and Node.js. Ben Awad ▶[The Vision for Graph Database from Postgres](https://www.youtube.com/watch?v=JQ0ycS8HqjE) — A talk given a few weeks ago at Postgres Vision 2019 about AgensGraph, a multi-model graph database built on top of Postgres. The audio isn’t great but you get a good overview of what AgensGraph _is_ and how it helps. AgensGraph supported by [![Percona\](https://res.cloudinary.com/cpress/image/upload/v1559053486/vmjp4kyjuomp5klwidlw.png)](https://learn.percona.com/postgresql-high-availability-registration-cooperpress) 💡 Tip of the Week Test how your app copes with Postgres failing or suffering high latency If you run your own Postgres server, it's as solid as a rock, right? Except when it isn't. And if you're running on cloud infrastructure, you never _really_ know how it's working operationally, so it pays to build your systems in a resilient way that can cope with Postgres failing. You could test your app under various failure scenarios by giving your app incorrect database authentication details, by taking your database server down, or even by putting a firewall rule in place, but what about _intermittent_ failures? You need something less severe for that. **[Toxiproxy](https://github.com/Shopify/toxiproxy) is an open source system that simulates different network conditions** so you can see how your app performs under scenarios where backend services, such as your Postgres database, are intermittent or suffering from high latency. It's both a Go-powered TCP proxy (so you can use it for other services than Postgres) and a handful of client libraries for Go, Ruby, Python, .NET, PHP, Node.js, Java and Haskell, so you can integrate it directly into your test suites. This week's tip is sponsored by [Percona.](https://learn.percona.com/postgresql-high-availability-registration-cooperpress) This [white paper](https://learn.percona.com/postgresql-high-availability-registration-cooperpress) discusses the importance of high availability database architectures and [how PostgreSQL can be configured for high availability.](https://learn.percona.com/postgresql-high-availability-registration-cooperpress) 🗓 Upcoming Postgres Events - [PGConf.Brasil 2019](https://www.pgconf.com.br/2019/en/) (August 1-3 in São Paulo) — A three day conference with talks, tutorials, courses, and lightning talks. - [PGDay Austria 2019](https://pgday.at/en/) (September 6 in Wiener Neustadt, Austria) - [PostgreSQL Conference Asia 2019](http://2019.pgconf.asia/) (September 9-12 in Bali, Indonesia) - [PostgresConf South Africa 2019](https://postgresconf.org/conferences/SouthAfrica2019) (October 8-9 in Johannesburg) — An opportunity for the database administration and developer community who use Postgres to get to know each other. Curated by [Cooperpress](https://cooperpress.com/) and [Craig Kerstiens](https://twitter.com/craigkerstiens). [Change your email address](https://postgresweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://postgresweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom