logic check of pg_hba.conf configuration

Поиск
Список
Период
Сортировка
От Dave
Тема logic check of pg_hba.conf configuration
Дата
Msg-id DBEIKNMKGOBGNDHAAKGNOEIMNAAA.dave@hawk-systems.com
обсуждение исходный текст
Ответы Re: logic check of pg_hba.conf configuration  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-admin
so rarely have problems with postgres that setup or reconfigs are few and far
between.  In reviewing the docs on this after a recent config error, I am asking
for assistance to acid test the following config file.

running version 7.0

current pg_hba.conf contains//
local        all                                           trust
host         sameuser    127.0.0.1     255.255.255.255     password
host         all         123.45.678.1 255.255.255.255     trust
host         all         0.0.0.0       0.0.0.0             reject

intended results are//
1) anyone who can ssh into the box should have admin priv anyway, as such trust
them
2) anyone accessing it via PHP, Perl, or others using port 5432 but from the
same physical machine  will get access to the database that they provide
username/pw for - expect them to be logging in as their postgres username
3) 123.45.678.1 is a secure box, and needs to access database tables and such...
as such it should be able to connect to and do whatever as needed...  trusted
4) no one else should from any other machine should be able to access any
database resources on this server


mods, misconceptions, problems?

thanks

Dave


В списке pgsql-admin по дате отправления:

Предыдущее
От: "Dave"
Дата:
Сообщение: Re: Postgres not starting at boot(FreeBSD) - startup script not releasing < solved
Следующее
От: Tom Lane
Дата:
Сообщение: Re: logic check of pg_hba.conf configuration