Re: Multiple auth types for a connection
| От | Tom Lane |
|---|---|
| Тема | Re: Multiple auth types for a connection |
| Дата | |
| Msg-id | 21650.1178142158@sss.pgh.pa.us обсуждение исходный текст |
| Ответ на | Multiple auth types for a connection (Rob Cherry <postgresadmin@lxrb.com>) |
| Ответы |
Re: Multiple auth types for a connection
|
| Список | pgsql-admin |
Rob Cherry <postgresadmin@lxrb.com> writes:
> Does anyone know if it is possible to overload auth types like this such
> that if pam fails password would be tried?
No, it's not, as per the Fine Manual:
: The first record with a matching connection type, client address,
: requested database, and user name is used to perform
: authentication. There is no "fall-through" or "backup": if one record is
: chosen and the authentication fails, subsequent records are not
: considered. If no record matches, access is denied.
Your best bet is probably to list the automated users specifically in
a record that specifies password, and then put another record that
selects pam for everyone else.
regards, tom lane
В списке pgsql-admin по дате отправления: