logic check of pg_hba.conf configuration - Mailing list pgsql-admin

From Dave
Subject logic check of pg_hba.conf configuration
Date
Msg-id DBEIKNMKGOBGNDHAAKGNOEIMNAAA.dave@hawk-systems.com
Whole thread Raw
Responses Re: logic check of pg_hba.conf configuration  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-admin
so rarely have problems with postgres that setup or reconfigs are few and far
between.  In reviewing the docs on this after a recent config error, I am asking
for assistance to acid test the following config file.

running version 7.0

current pg_hba.conf contains//
local        all                                           trust
host         sameuser    127.0.0.1     255.255.255.255     password
host         all         123.45.678.1 255.255.255.255     trust
host         all         0.0.0.0       0.0.0.0             reject

intended results are//
1) anyone who can ssh into the box should have admin priv anyway, as such trust
them
2) anyone accessing it via PHP, Perl, or others using port 5432 but from the
same physical machine  will get access to the database that they provide
username/pw for - expect them to be logging in as their postgres username
3) 123.45.678.1 is a secure box, and needs to access database tables and such...
as such it should be able to connect to and do whatever as needed...  trusted
4) no one else should from any other machine should be able to access any
database resources on this server


mods, misconceptions, problems?

thanks

Dave


pgsql-admin by date:

Previous
From: "Dave"
Date:
Subject: Re: Postgres not starting at boot(FreeBSD) - startup script not releasing < solved
Next
From: Tom Lane
Date:
Subject: Re: logic check of pg_hba.conf configuration