Re: confusion about user paring with pg_hba and pg_ident - Mailing list pgsql-general

From Tom Lane
Subject Re: confusion about user paring with pg_hba and pg_ident
Date
Msg-id 31990.1476195637@sss.pgh.pa.us
Whole thread Raw
In response to confusion about user paring with pg_hba and pg_ident  (arnaud gaboury <arnaud.gaboury@gmail.com>)
Responses Re: confusion about user paring with pg_hba and pg_ident  (arnaud gaboury <arnaud.gaboury@gmail.com>)
Re: confusion about user paring with pg_hba and pg_ident  (arnaud gaboury <arnaud.gaboury@gmail.com>)
List pgsql-general
arnaud gaboury <arnaud.gaboury@gmail.com> writes:
> I am a little confused about some of my settings when it comes to map
> linux/psql users.

I think you're misunderstanding what the user-mapping stuff does.
It does not silently translate the username in the connection request
to something else; rather, it checks whether a user having the given
external name is allowed to log in as a particular Postgres user.
So there's nothing particularly wrong with your config files, but your
expectation about how your Linux users should log in to the database is
mistaken.  dovecot needs to specify that it wants to log in as mailman,
and likewise mattermost needs to specify mmuser.

If it's not practical to make the client applications send non-default
user names, you'll need to rename the Postgres roles to match the
external user names.

            regards, tom lane


pgsql-general by date:

Previous
From: Lele Gaifax
Date:
Subject: Re: Create recursive view schema.name
Next
From: Rémi Cura
Date:
Subject: forcing a table (parent in inheritance) tor emain empty