Re: pg_hba.conf change in 7.4

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: pg_hba.conf change in 7.4
Дата
Msg-id 200311201711.hAKHB2e04235@candle.pha.pa.us
обсуждение исходный текст
Ответ на pg_hba.conf change in 7.4  (Seum-Lim Gan <slgan@lucent.com>)
Ответы Re: pg_hba.conf change in 7.4  (Seum-Lim Gan <slgan@lucent.com>)
Список pgsql-general
Seum-Lim Gan wrote:
> Hi,
>
> In 7.4, I noticed there is this ::1 and ffff: (x8 of them)
> for IPv6.
>
> I looked at the documentation and there is nothing that says
> what the ::1 is for.

The ::1 is a IPv6 shorthand for 127.0.0.1 (localhost).

> Commenting out that line will prevent access to PostgreSQL
> from psql unless I put trust for that line.
>
> This is what I had in 7.3.4:
> host    all         all         127.0.0.1         255.255.255.255
> ident pspmap
> local   all         all                                             password
> host    all         all         0.0.0.0        0.0.0.0          reject
>
> But in 7.4, it does not work anymore. It seems to want ::1 to be somewhere.
> If I change the line with ::1 from trust to ident pspmap, it complains that
> the user cannot be found. But it is in the pspmap. Message fromm psql:

Seems you have an OS that makes all connections IPv6, even IPv4 ones.
That is why we had to have that line in there.  Seems ::1 controls your
local connections on that platform.  Some platforms have distinct IPv4
and IPv6 connections, so we have to include both lines in the file.

> Right now, I have it set to trust to work around.
> Any idea what to do about this ?
>
> host    all         all         127.0.0.1         255.255.255.255
> ident pspmap
> local   all         all                                             password
> host    all         all         0.0.0.0        0.0.0.0          reject
> # IPv4-style local connections:
> #host    all         all         127.0.0.1         255.255.255.255   trust
> # IPv6-style local connections:
> host    all         all         ::1
> ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff        trust

Yea, that's about it.  My guess is that nothing is coming in via IPv4 on
your machine so 127.0.0.1 does nothing.  Perhaps netstat will show the
IP address family used.

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

В списке pgsql-general по дате отправления:

Предыдущее
От: konf@chalu.cz
Дата:
Сообщение: Re: error durring compilation
Следующее
От: Seum-Lim Gan
Дата:
Сообщение: Re: pg_hba.conf change in 7.4