Re: md5 and trust and pg_hba.conf

Maria,

I share the thoughts of Samir.

Also, please note that localhost and 127.0.0.1 are the same. I would leave 'localhost' which also covers ipv6. And remove 127.0.0.1. Or the other way around if you do not use ipv6.

Aas per your problem can you copy/paste the 'prompt' you get when you try to connect as gd07?

Unless your pg_hba.conf contains more entries than here reported, you should get instead a:

psql: FATAL:  no pg_hba.conf entry for host "a.b.c.d", user "some_user", database "some_db"

So please post the entire content of it as mentioned.

Also, it might help debugging if as psgdba you run:

env | grep PG


to check the PG variables set for the user.

What happens if you run as psgdba the following?

/usr/pgsql-9.3/bin/psql -d postgres -h localhost -U psgdba

Side note: when you have everything in order, please consider to enforce authentication on your db, thus removing 'trust'. 'Trust' is your enemy. Mkey?

Regards,

fabio pardi

On Mon, Sep 10, 2018 at 10:46 PM Rossi, Maria <maria.rossi@jackson.com> wrote:

Hi,

 

Question on pg_hba.conf.  I have these entries:

 

host    all             psgdba           localhost           trust

host    all             psgdba           127.0.0.1/32            trust

host    all             gd07           localhost                trust

host    all             gd07            127.0.0.1/32           trust

 

Can you post the whole of pg_hba.conf file?

You might have some other entry that is taking precedence.

 

 

Command to logon to Postgres:

/usr/pgsql-9.3/bin/psql -d postgres

If you don't have PGHOST set then most likely you are not going over a tcp connection (which is what host entries in pg_hba are used for). Instead the local entries of pg_hba are taking effect.

 

If I am logged on ‘gd07’  at the server , it lets me log-on to Postgres without prompting for password

do you have a *.pgpass* file in the home directory?

 

If I am logged on as ‘psgdba’, it prompts for password.

As you can see, both have ‘trust’, but ‘gd07’ is the instance owner.

 

Why does ‘psgdba’ prompts?  What I am missing?

Your help would be much appreciated.

 

Thanks.

Maria

 

--

-- 

Best Regards,

Sameer Kumar | Senior Solution Architect

ASHNIK PTE. LTD.

36 Robinson Road, #14-04 City House, Singapore 068877

T: +65 6438 3504 | www.ashnik.com

Skype: sameer.ashnik |   M: +65 8110 0350