Re: Too easy to log in as the "postgres" user? - Mailing list pgsql-general

* Andrew Bailey (hazlorealidad@gmail.com) wrote:
> You appear to be trusting all connections what I think you want is the
> following:
>
> local all all ident sameuser
> # IPv4 local connections:
> host all all 127.0.0.1/32 ident sameuser
> # IPv6 local connections:
> host all all ::1/128 ident sameuser
>
> Remember that you need to get postgres to reread the file after
> changing it by using pg_ctl reload or kill -HUP {pid}

ident sameuser for host connections really isn't recommend nor is
terribly secure, in general.  Over localhost is better, but using local
is infinitely better, imo.

    Stephen