"Andrej Ricnik-Bay" <andrej.groups@gmail.com> writes:
> On 06/03/2008, Ralph Smith <smithrn@washington.edu> wrote:
>> Even after reloading and restarting the DB, which shouldn't be necessary,
>> smithrn still gets in w/o any password checks.
>> How come?
> Impossible to answer w/o knowing any entries in your pg_hba.conf
I think the OP expects the act of assigning a password to a particular
role to be enough to cause password authentication to be used. It's
not: you have to make sure that pg_hba.conf specifies that auth method.
regards, tom lane