Postgres Pro
Downloads
Home   >   mailing lists

Thread: pg_hba.conf analysis tool

pg_hba.conf analysis tool

From
salah jubeh
Date:
Hello,

I am looking for a tool that could help me in analyzing the pg_hab.conf file. For example , detecting duplicates, unused entries, and overlaping entries.

Regards

Re: pg_hba.conf analysis tool

From
Bruce Momjian
Date:
On Fri, Feb 14, 2014 at 07:28:38AM -0800, salah jubeh wrote:
> Hello,
>
> I am looking for a tool that could help me in analyzing the pg_hab.conf file.
> For example , detecting duplicates, unused entries, and overlaping entries.

We are in the process of talking about this:

    http://www.postgresql.org/message-id/86fvnm5t44.fsf@jerry.enova.com


I know of no tool currently available.

--
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + Everyone has their own god. +

Re: pg_hba.conf analysis tool

From
salah jubeh
Date:
>We are in the process of talking about this:

>    http://www.postgresql.org/message-id/86fvnm5t44.fsf@jerry.enova.com

> I know of no tool currently available.

Thank you, for the reply. I think, my case might be a little bit different.
I am working with several clusters and I find sometimes pg_hba rules which does not make sense. So, a tool which could give hints or detect bad configurations might help.

For example

local   all         appl1                          trust
local   all         appl1                          md5

Or  
host    all         all         IP_ADDRESS/24       md5
host    all         all         IP_ADDRESS/32       md5

OR
host    all         all         IP_ADDRESS/24       reject
host    all         all         IP_ADDRESS/32       md5
OR
host    all         all         IP_ADDRESS1/32       md5
host    all         all         IP_ADDRESS2/32       md5
host    all         all         IP_ADDRESS3/32       md5
host    all         all         IP_ADDRESS4/32       md5
....
which could be replaced
host    all         all         IP_ADDRESS1/24       md5

Regards


On Friday, February 14, 2014 4:39 PM, Bruce Momjian <bruce@momjian.us> wrote:
On Fri, Feb 14, 2014 at 07:28:38AM -0800, salah jubeh wrote:

> Hello,
>
> I am looking for a tool that could help me in analyzing the pg_hab.conf file.
> For example , detecting duplicates, unused entries, and overlaping entries.


We are in the process of talking about this:

    http://www.postgresql.org/message-id/86fvnm5t44.fsf@jerry.enova.com


I know of no tool currently available.

--
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                            http://enterprisedb.com

  + Everyone has their own god. +


--
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general