Re: Enable user access from remote host - Mailing list pgsql-general

From John R Pierce
Subject Re: Enable user access from remote host
Date
Msg-id 49B459A6.2020407@hogranch.com
Whole thread Raw
In response to Re: Enable user access from remote host  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: Enable user access from remote host  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
Tom Lane wrote:
> John R Pierce <pierce@hogranch.com> writes:
>
>> *HOWEVER*   "ident sameuser" should *not* be used for HOST connections,
>> its only reliable for LOCAL connections.
>>
>
> A more accurate statement is that it's trustworthy to the extent that
> you trust the owner of the other machine to be running a non-broken
> identd daemon.  Within a LAN it might be perfectly reasonable to use.
>

you would have to extend that trust to any machine connected to any
network which can be routed to the server in question as he was
specifying a wildcard IP, and that includes anything that anyone could
plug into any network port.

no thanks.



pgsql-general by date:

Previous
From: Carl Sopchak
Date:
Subject: Re: Newbie questions relating to transactions
Next
From: Chris
Date:
Subject: Re: Log SQL code before executing it