Re: pg_hba.conf - Mailing list pgsql-general

From Russell Smith
Subject Re: pg_hba.conf
Date
Msg-id 4560F3E8.6020902@pws.com.au
Whole thread Raw
In response to pg_hba.conf  (Tom Allison <tom@tacocat.net>)
Responses Re: pg_hba.conf  (Tom Allison <tom@tacocat.net>)
List pgsql-general
Tom Allison wrote:
> Ran into a mystery that I can't seem to figure out....
>
>
> I want to authenticate using SSL for all external IP addresses that I
> have in my subnet.  I also want to be able to authenticate via non-SSL
> for localhost (not unix socket).
>
> I thought something like this would work:
>
> host       all    all    127.0.0.1/32     md5
> hostssl    all    all    192.168.0.1/24   md5
>
> But I have a localhost client that can't log in because it keeps
> trying to authenticate via SSL.
>
> What am I doing wrong?  It seems simple enough.
What command are you typing?

#nonssl
postgres$ psql -h localhost postgres
#ssl
postgres$ psql -h 192.168.1.1 postgres

>
> ---------------------------(end of broadcast)---------------------------
> TIP 5: don't forget to increase your free space map settings
>
>


pgsql-general by date:

Previous
From: Tom Allison
Date:
Subject: pg_hba.conf
Next
From: Tom Lane
Date:
Subject: Re: pg_hba.conf