Thread: BUG #3987: Not checking the password

BUG #3987: Not checking the password

From
"chandra"
Date:
The following bug has been logged online:

Bug reference:      3987
Logged by:          chandra
Email address:      cmaddila@yahoo.co.in
PostgreSQL version: 8.1
Operating system:   Linux
Description:        Not checking the password
Details:

We have installed postgres in Linux box and accessing through Pgadmin
3-1.8.2.2.

When we connecting to the database it is asking the password. Without giving
the password we are able to connect to the database thru pqadmin tool. It
should check the password.

Am I missing while installing postgres?

We are storing very confidential data in our database. If anyone knows the
ip address they can easly connect thru pgadmin and  hack the data.

Re: BUG #3987: Not checking the password

From
Tom Lane
Date:
"chandra" <cmaddila@yahoo.co.in> writes:
> When we connecting to the database it is asking the password. Without giving
> the password we are able to connect to the database thru pqadmin tool. It
> should check the password.

It sounds like you have different authentication methods selected for
different connection sources.  Look at pg_hba.conf (and don't forget
you need "pg_ctl reload" after changing it).

            regards, tom lane