Re: ident client authentication - Mailing list pgsql-general

From Paul Hide
Subject Re: ident client authentication
Date
Msg-id b117fb190511080918g3991594dld11818cad14d8dad@mail.gmail.com
Whole thread Raw
In response to Re: ident client authentication  (Bruno Wolff III <bruno@wolff.to>)
Responses Re: ident client authentication
List pgsql-general
Many thanks for your reply.

The web  server runs as what/whoever it does by default. I haven't changed it.

I understand what you are getting at, because Richard Huxton pointed out to me that the script is probably running as the web server user.

The script runs as 'apache' (let us say), the connect in the python program is by 'jim'. Then what does sameuser mean in the hba file.

Paul Hide
On 11/8/05, Bruno Wolff III <bruno@wolff.to> wrote:
On Tue, Nov 08, 2005 at 10:02:14 +0000,
  Paul Hide <paul.hide@gmail.com> wrote:
> I have a problem with ident client authentication.
> My server is debian sarge, pg version is 7.4.7, apache 2.0.54, mod_python
> 2.3. A python script is placed on the server and runs under mod_python in
> apache.
>
> I make a request from firefox on a win 2k box to this server.
> If I have
> local all jim trust
> in my pg_hba.conf file, all is well, my python script runs and delivers the
> expected output.
>
> However, if i have
> local all jim ident sameuser
> I get FATAL: IDENT authentication failed for user jim, via mod-python debug
> and in postgres log.
>
> jim is both a unix user (linux) and a postgres user.
>
> Is this what would be expected?

Does the web server run as user jim? That seems unusual. You may need to set
up an ident map that allows user 'apache' (or whatever applies on your machine)
to connect as postgres user 'jim'.

> How can I make ident authentication work?
>
> Any help would be appreciated, including where this message should be posted
> if this list is inappropriate.
>
> Paul Hide

pgsql-general by date:

Previous
From: "Cristian Prieto"
Date:
Subject: Number of items in a cursor...
Next
From: "Gerard O Connor"
Date:
Subject: Re: [ANNOUNCE] PostgreSQL 8.1.0 Release Candidate 1