Re: Selective authentication? - Mailing list pgsql-novice

From Tom Lane
Subject Re: Selective authentication?
Date
Msg-id 5350.1125030855@sss.pgh.pa.us
Whole thread Raw
In response to Re: Selective authentication?  ("Charley L. Tiggs" <ctiggs@xpressdocs.com>)
List pgsql-novice
"Charley L. Tiggs" <ctiggs@xpressdocs.com> writes:
> For information on setting up a .pgpass file:
> http://www.postgresql.org/docs/8.0/static/libpq-pgpass.html

.pgpass for everyone is one way, but there are others.  If this is
all going to be local connections, you could also think about
setting up your pg_hba.conf file along the lines of

    local    any    dbadmin        md5
    local    any    any        ident

This would have the effect of requiring a password from anyone trying to
log in as dbadmin.  For every other database user name, there'd be a
check that they were logged in under the same Unix user name, and if so
they'd be let in without a password.

Ident is not too trustworthy across the network, but for local
connections it should be fine.

            regards, tom lane

pgsql-novice by date:

Previous
From: Tom Lane
Date:
Subject: Re: Copy Failure
Next
From: "Charley L. Tiggs"
Date:
Subject: Re: SQL problem?