Re: [GENERAL] User authentication blues - Mailing list pgsql-general

From Jeffrey Napolitano
Subject Re: [GENERAL] User authentication blues
Date
Msg-id 35C09B13.68020018@setech.com
Whole thread Raw
In response to User authentication blues  (Maarten Boekhold <maartenb@dutepp0.et.tudelft.nl>)
Responses Re: [GENERAL] User authentication blues  (Maarten Boekhold <maartenb@dutepp0.et.tudelft.nl>)
List pgsql-general
Your pg_hba.conf listing does not include a password FILE - the format
is:

host    allowedDB's    IPaddys        mask    AUTHTYPE    PASSWORDFILE
                        (such as    (such as
                        "password",    "mypasswords")
                        "trust", etc)
--
When I was seven years old, I was once reprimanded by my mother for an
act of collective brutality in which I had been involved at school.  A
group of seven-year-olds had been teasing and tormenting a
six-year-old.  "It is always so," my mother said.  "You do things
together which not one of you would think of doing alone."  ...
Wherever one looks in the world of human organization, collective
responsibility brings a lowering of moral standards.  The military
establishment is an extreme case, an organization which seems to have
been expressly designed to make it possible for people to do things
together which nobody in his right mind would do alone.
                -- Freeman Dyson, "Weapons and Hope"

Jeffrey Napolitano
Lowly Intern
Software Emancipation Technology


Maarten Boekhold wrote:
>
> Hi,
>
> I have a 6.3.2 server, and I want to use password authentication.
> So, I gave the user 'postgres' and some other user a password, and I put this
> in my pg_hba.conf:
>
> host         all         127.0.0.1     255.255.255.255   password
> host         all         206.31.72.11  255.255.255.255   password
>
> But I cannot connect this way using a password (psql -u). I can connect
> if I set everything to 'trust', but in that case I can even fool
> posttresql in thinking I'm user postgres while I'm logged on as the other
> user by using password authentication and using 'postgres' as username
> while supplying a fake password.
>
> Am I doing something wrong here?
>
> Maarten
>
> _____________________________________________________________________________
> | TU Delft, The Netherlands, Faculty of Information Technology and Systems  |
> |                   Department of Electrical Engineering                    |
> |           Computer Architecture and Digital Technique section             |
> |                          M.Boekhold@et.tudelft.nl                         |
> -----------------------------------------------------------------------------

pgsql-general by date:

Previous
From: James Boorn
Date:
Subject: Re: [GENERAL] Strange behaviour ?
Next
From: Daniele Orlandi
Date:
Subject: Re: [GENERAL] Strange behaviour ?