Skip site navigation (1) Skip section navigation (2)

Re: pg_hba.conf

From: "Donald Fraser" <postgres(at)kiwi-fraser(dot)net>
To: "[ADMIN]" <pgsql-admin(at)postgresql(dot)org>
Subject: Re: pg_hba.conf
Date: 2005-02-22 13:48:11
Message-ID: 008201c518e5$268d77b0$0264a8c0@demolish1 (view raw or flat)
Thread:
Lists: pgsql-admin
If postgres has ssl enabled then it will by default negotiate to use ssl,
regardless of the host or hostssl settings in pg_hba. Your client software
needs to refuse ssl connections then it will fall back to a non-ssl
connection so long as there exists a host setting in pg_hba. The hostssl
setting in pg_hba means that it must use ssl to connect, where as the host
setting in pg_hba can mean either or, depending on your client.

What client software are you using?

Regards
Donald Fraser

----- Original Message ----- 
From: "Dick Davies" <rasputnik(at)hellooperator(dot)net>
To: "PostgreSQL Admin" <pgsql-admin(at)postgresql(dot)org>
Sent: Tuesday, February 22, 2005 1:26 PM
Subject: Re: [ADMIN] pg_hba.conf


> * K?PFERL Robert <robert(dot)koepferl(at)sonorys(dot)at> [0228 12:28]:
> > According to the excelent doc, the _first_ matching entry will be used.
>
> If that were true, the below would work, surely?
>
> > C:\> I have this:
> > C:\>
> > C:\> root(at)eris:postgresql80-server$ cat /opt/pgsql/data/pg_hba.conf
> > C:\> # TYPE     DATABASE    USER        IP-ADDRESS      METHOD
> > C:\> local      all         all                         trust
> > C:\> host    all         all         10.2.3.4/32   md5
> > C:\> hostssl    all         all      0.0.0.0/0   md5
>
> -- 
> 'Interesting. No, wait, the other thing - Tedious.'
> -- Bender
> Rasputin :: Jack of All Trades - Master of Nuns
>
> ---------------------------(end of broadcast)---------------------------
> TIP 5: Have you checked our extensive FAQ?
>
>                http://www.postgresql.org/docs/faq
>


In response to

Responses

pgsql-admin by date

Next:From: Zouari FouratDate: 2005-02-22 14:07:45
Subject: postgres user, forgotten password
Previous:From: Dick DaviesDate: 2005-02-22 13:26:15
Subject: Re: pg_hba.conf

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group