Re: pg_hba.conf authorization question - Mailing list pgsql-general

From Thomas Beutin
Subject Re: pg_hba.conf authorization question
Date
Msg-id 20021213174625.A8650@laokoon.bug.net
Whole thread Raw
In response to pg_hba.conf authorization question  ("Reid Thompson" <Reid.Thompson@ateb.com>)
List pgsql-general
On Fri, Dec 13, 2002 at 11:25:00AM -0500, Reid Thompson wrote:
> Could someone give me guidance on the following.
> I would like to configure the DB such that connections will only be
> allowed to users created using createuser verified by the password that
> was set during the creatuser process.  The user and password do NOT
> correlate to system users(linux host).  Connections will be both local
> and TCP based.
> Rather than the open to everyone entries that I have in pg_hba.conf
> below, what should the entries look like under
>
> # TYPE     DATABASE    IP_ADDRESS    MASK               AUTH_TYPE
> AUTH_ARGUMENT
> local      all                                          trust
> host       all         127.0.0.1     255.255.255.255    trust
> host       all         192.168.100.0 255.255.255.0      trust
AFAIK the AUTH_TYPE "trust" doesn't look for password but let the
user connect. IMHO the AUTH_TYPE "md5" compares the given password
with that stored in pg_shadow.
But i've never tried...

Greetings,
-tb
--
Thomas Beutin                             tb@laokoon.IN-Berlin.DE
Beam me up, Scotty. There is no intelligent live down in Redmond.

pgsql-general by date:

Previous
From: Jean-Luc Lachance
Date:
Subject: Re: [PERFORM] CLUSTER command
Next
From: Çagil Seker
Date:
Subject: Re: pg_hba.conf authorization question