Re: Multiple auth types for a connection - Mailing list pgsql-admin

From Tom Lane
Subject Re: Multiple auth types for a connection
Date
Msg-id 21650.1178142158@sss.pgh.pa.us
Whole thread Raw
In response to Multiple auth types for a connection  (Rob Cherry <postgresadmin@lxrb.com>)
Responses Re: Multiple auth types for a connection
List pgsql-admin
Rob Cherry <postgresadmin@lxrb.com> writes:
> Does anyone know if it is possible to overload auth types like this such
> that if pam fails password would be tried?

No, it's not, as per the Fine Manual:

: The first record with a matching connection type, client address,
: requested database, and user name is used to perform
: authentication. There is no "fall-through" or "backup": if one record is
: chosen and the authentication fails, subsequent records are not
: considered.  If no record matches, access is denied.

Your best bet is probably to list the automated users specifically in
a record that specifies password, and then put another record that
selects pam for everyone else.

            regards, tom lane

pgsql-admin by date:

Previous
From: Rob Cherry
Date:
Subject: Multiple auth types for a connection
Next
From: Geoff Tolley
Date:
Subject: Re: Multiple auth types for a connection