Re: Dynamic IP authentication

Sam Barnett-Cormack wrote:

 > On Fri, 19 Mar 2004, Richard Dockery wrote:
 >
 >
 >> Does anyone know a way of authenticating client applications with
dynamic IP
 >> addresses?  All our client machines are receiving dynamic IP
addresses.  Is
 >> there a way to set up the pg_hba file to allow for this, or is there
another
 >> way to configure connections so as not to use this file?
 >> Any thoughts would be appreciated.
 >> Thank you!
 >
 >
 >
 > Open access to the whole IP range, but require passwords. I think you
 > can wrap in SSL as well.
 >

This is what I do, and now I won't let non-SSL connections through.  The
pg_hba.conf entry that lets me connect over SSL from anywhere looks like
this:

     hostssl  all  mitchy  0.0.0.0   0.0.0.0   password

Of course you need to configure your database box with an SSL key, which
is well documented.

-- Mitch