Re: pg_hba and * - Mailing list pgsql-admin

From Bruno Wolff III
Subject Re: pg_hba and *
Date
Msg-id 20041216172303.GB11300@wolff.to
Whole thread Raw
In response to pg_hba and *  (FM <dist-list@LEXUM.UMontreal.CA>)
List pgsql-admin
On Thu, Dec 16, 2004 at 10:52:31 -0500,
  FM <dist-list@LEXUM.UMontreal.CA> wrote:
> Hello,
> We have kerberos auth for all humain users, but I still need md5 auth
> for scripts users.
>
> All my scripts user name start with soft_
>
> Can I add soft_* in the pg_hba ?

You can't do pattern matching there.

It probably wouldn't be that hard to make a custom change to allow
some sort of pattern matching.

Another option would be to have a script that updates pg_hba.conf
as needed (and signal the server).

Yet another possible option (if the scripts are only run from the server)
is to use md5 for domain socket connections and kerberos for tcp/ip
connections.

pgsql-admin by date:

Previous
From: Sam Mortimer
Date:
Subject: Re: robust way of moving tables to a different disk??
Next
From: Michael Fuhr
Date:
Subject: Re: missing schemas from template1