Sam Barnett-Cormack wrote:
> On Fri, 19 Mar 2004, Richard Dockery wrote:
>
>
>> Does anyone know a way of authenticating client applications with
dynamic IP
>> addresses? All our client machines are receiving dynamic IP
addresses. Is
>> there a way to set up the pg_hba file to allow for this, or is there
another
>> way to configure connections so as not to use this file?
>> Any thoughts would be appreciated.
>> Thank you!
>
>
>
> Open access to the whole IP range, but require passwords. I think you
> can wrap in SSL as well.
>
This is what I do, and now I won't let non-SSL connections through. The
pg_hba.conf entry that lets me connect over SSL from anywhere looks like
this:
hostssl all mitchy 0.0.0.0 0.0.0.0 password
Of course you need to configure your database box with an SSL key, which
is well documented.
-- Mitch
