Обсуждение: changing pb_hba.conf file with pgadmin3
Is it possible to edit pg_hba.conf of a postgresql cluster running on a linux (debian) server, from my pgadmin application running on windows 7?
If so, what are the steps to accomplish that?
If so, what are the steps to accomplish that?
I appreciate your help.
GilneiOn Tue, Jan 14, 2014 at 10:37 AM, Jose Gilney <jgilney@gmail.com> wrote:
rls
--
:wq
Is it possible to edit pg_hba.conf of a postgresql cluster running on a linux (debian) server, from my pgadmin application running on windows 7?
No, that's not possible, and probably won't ever be. Consider the security implications of enabling that kind of thing...
rls
:wq
pgadmin could use the new ALTER SYSTEM command (coming in 9.4)On Tue, Jan 14, 2014 at 10:37 AM, Jose Gilney <jgilney@gmail.com> wrote:Is it possible to edit pg_hba.conf of a postgresql cluster running on a linux (debian) server, from my pgadmin application running on windows 7?No, that's not possible, and probably won't ever be. Consider the security implications of enabling that kind of thing...
http://www.depesz.com/2014/01/09/waiting-for-9-4-add-alter-system-command-to-edit-the-server-configuration-file/
-- Korry
On Tue, Jan 14, 2014 at 11:35 AM, Korry Douglas <korry.douglas@enterprisedb.com> wrote:
ALTER SYSTEM is for setting (some — specifically, runtime configurable) postgresql.conf directives, not pg_hba.conf rules. See <http://www.postgresql.org/docs/devel/static/sql-altersystem.html>
pgadmin could use the new ALTER SYSTEM command (coming in 9.4)
Assume for a moment that you could change hba rules with ALTER SYSTEM: what happens if a malicious user were to add a "host all all 0.0.0.0/0 reject" rule? Or, perhaps worse, "host all postgres 0.0.0.0/0 trust"?
rls
--
:wq
:wq
On Tue, Jan 14, 2014 at 11:35 AM, Korry Douglas <korry.douglas@enterprisedb.com> wrote:ALTER SYSTEM is for setting (some — specifically, runtime configurable) postgresql.conf directives, not pg_hba.conf rules. See <http://www.postgresql.org/docs/devel/static/sql-altersystem.html>pgadmin could use the new ALTER SYSTEM command (coming in 9.4)
Ah right... sorry I misread the original question.
-- Korry