Обсуждение: No entry to pg_hba.conf 10.17.11.16
Please somebody help me. I put the following line at pg_hba.conf: local all 10.17.11.0 255.255.255.0 trust But I could not conect and it is telling there is no entry to conect ip 10.17.11.16. Just please let me know what I have forgotten to set up. Thanks Fabiano J. Costola
> I put the following line at pg_hba.conf: > > local all 10.17.11.0 255.255.255.0 trust Mine has a "user" column, which yours skipped. It would be: local all all 10.17.11.0 255.255.255.0 trust You must also make sure you restart the server. Try connecting on localhost or 127.0.0.1. PS, are you actually on a Class C network? If you are, then your subnet mask might be 255.0.0.0, or something else entirely. -Keith
I do not know why the others has "USER" at pg_hba.conf. Maybe your version is 7.3. Mine is 7.2. Thanks for your suggestion but it have not worked. The mask I use is from my local network, and all the stations is with the same mask. I restarted the server many times using pg_ctl restart or stop and then start. I do not know what can I do. efesar wrote: >>I put the following line at pg_hba.conf: >> >>local all 10.17.11.0 255.255.255.0 trust >> >> > >Mine has a "user" column, which yours skipped. It would be: > >local all all 10.17.11.0 255.255.255.0 trust > >You must also make sure you restart the server. Try connecting on localhost >or 127.0.0.1. > >PS, are you actually on a Class C network? If you are, then your subnet mask >might be 255.0.0.0, or something else entirely. > >-Keith > > >---------------------------(end of broadcast)--------------------------- >TIP 6: Have you searched our list archives? > >http://archives.postgresql.org > > >
I'm not a TCP/IP networking expert, but I'm pretty certain that 10.x.x.x addresses are the very definition of a private non-routableClass A network. Which means the subnet mask should be 255.0.0.0. 255.255.255.0 is the mask for Class C networks, which for private networks are generally defined as 192.168.x.x. The first big question is can you ping the server from another machine on your private network? (Assuming ICMP8 is not blockedby a software firewall). If you can't ping it, then something is wrong with your network configuration. Are you ableto access the server at the specified IP address through other services, such as telnet, ssh, ftp? (assumes that someof those daemons are running on the server) Can the server ping itself? Does it's ethernet interface even work? Can it ping other hosts on the network? Keep askingquestions like this and sooner or later you'll have your answer. IP References: http://www.oreilly.com/catalog/coreprot/chapter/appb.html http://questy.com/tech/netw62.htm http://www.sangoma.com/fguide.htm Roman >I do not know why the others has "USER" at pg_hba.conf. Maybe your >version is 7.3. Mine is 7.2. > >Thanks for your suggestion but it have not worked. The mask I use is >from my local network, and all the stations is with the same mask. > >I restarted the server many times using pg_ctl restart or stop and then >start. I do not know what can I do. >>>I put the following line at pg_hba.conf: >>> >>>local all 10.17.11.0 255.255.255.0 trust >>> >>> >> >>Mine has a "user" column, which yours skipped. It would be: >> >>local all all 10.17.11.0 255.255.255.0 trust >> >>You must also make sure you restart the server. Try connecting on localhost >>or 127.0.0.1. >> >>PS, are you actually on a Class C network? If you are, then your subnet mask >>might be 255.0.0.0, or something else entirely. >> >>-Keith
> -----Original Message----- > From: Roman Fail [mailto:rfail@posportal.com] > Sent: 12 March 2003 16:01 > To: Fabiano; pgadmin-support@postgresql.org > Subject: Re: [pgadmin-support] No entry to pg_hba.conf 10.17.11.16 > > > I'm not a TCP/IP networking expert, but I'm pretty certain > that 10.x.x.x addresses are the very definition of a private > non-routable Class A network. Which means the subnet mask > should be 255.0.0.0. > Yes and no. In this case, the mask is used to determine the number of bits in the address that are relevant to the rule, so: 192.168.1.1 255.255.255.255 - All bits are relevant, so the entry applies only to that exact address. 192.168.1.1 255.255.255.0 - The first 24 bits are relevant, so the entry applies to 192.168.1.x 192.168.1.1 255.255.0.0 - The first 16 bits are relevant, so the entry applies to 192.168.x.x I think in this case, the problem is that 'local' is specified, which generally applies to Unix domain sockets, and that one column is missing as Keith suggested: > local all 10.17.11.0 255.255.255.0 trust To let hosts with an address of 10.17.11.x in, the entry should probably be: host all all 10.17.11.0 255.255.255.0 trust Regards, Dave.
Вложения
On Wednesday 12 March 2003 11:00, Roman Fail wrote: > I'm not a TCP/IP networking expert, but I'm pretty certain that 10.x.x.x > addresses are the very definition of a private non-routable Class A > network. Which means the subnet mask should be 255.0.0.0. > 255.255.255.0 is the mask for Class C networks, which for private networks > are generally defined as 192.168.x.x. Minor correction. With CIDR you can use any netmask with any private IP ranges. Using 10.x.x.x within an organization allows tremendous flexibility in subnetting. I use that here, to great effect. -- Lamar Owen WGCR Internet Radio 1 Peter 4:11
Many thanks for everybody. I realize that postgresql assume the mask 255.255.255.0 as an external net. So I put "host" and it is working great now. Dave is correct. All the information about the mask provided by you guys is relevant and correct. I found out that the postgres assume the masks in a correct rule to know what is local and what is internet. Thanks Keith, Roman, Lamar and Dave. I hope be useful for you in the future. efesar wrote: >>I put the following line at pg_hba.conf: >> >>local all 10.17.11.0 255.255.255.0 trust >> >> > >Mine has a "user" column, which yours skipped. It would be: > >local all all 10.17.11.0 255.255.255.0 trust > >You must also make sure you restart the server. Try connecting on localhost >or 127.0.0.1. > >PS, are you actually on a Class C network? If you are, then your subnet mask >might be 255.0.0.0, or something else entirely. > >-Keith > > >---------------------------(end of broadcast)--------------------------- >TIP 6: Have you searched our list archives? > >http://archives.postgresql.org > > >