Re: Multiple auth types for a connection - Mailing list pgsql-admin

Tom Lane wrote:
> Rob Cherry <postgresadmin@lxrb.com> writes:
>> Does anyone know if it is possible to overload auth types like this such
>> that if pam fails password would be tried?
>
> No, it's not, as per the Fine Manual:

Provided that you don't care about the security and performance
implications of SSL vs non-SSL connectivity, wouldn't it be possible to
have something like:

hostnossl    all         all         0.0.0.0/0             krb5
hostssl      all         all         0.0.0.0/0             md5

... and then have sslmode set to prefer or allow on the client side?

Cheers,
Geoff