Re: TCPIP connection on local host using md5 - Mailing list pgsql-admin

From Tom Lane
Subject Re: TCPIP connection on local host using md5
Date
Msg-id 2603.1350245713@sss.pgh.pa.us
Whole thread Raw
In response to TCPIP connection on local host using md5  (Jimy McDermott <jmcdermott@catbird.com>)
List pgsql-admin
Jimy McDermott <jmcdermott@catbird.com> writes:
> pg_hba.conf:
> # TYPE  DATABASE        USER            ADDRESS                 METHOD

> # "local" is for Unix domain socket connections only
> local   all             all                                     peer
> # IPv4 local connections:
> host    all             all             127.0.0.1/32            ident
> # IPv6 local connections:
> host    all             all             ::1/128                 ident
> # Allow replication connections from localhost, by a user with the
> # replication privilege.
> host     all             all             192.168.20.250/32       md5   #
> This line supports the remote connection that works great
> host     all             report          127.0.0.1/32            md5      #
> This line is intended to support the local connection that is failing

pg_hba.conf lines are considered in order, so the second one (with the
ident auth method) is matching the incoming connection before the last
one ever gets considered.  You need to re-order those lines.  The rule
of thumb is "most specific rule first".

            regards, tom lane


pgsql-admin by date:

Previous
From: Jimy McDermott
Date:
Subject: TCPIP connection on local host using md5
Next
From: Tore Halset
Date:
Subject: autovacuum with lots of open file references to deleted files