Re: client authentication towards postgresql in php?

From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: Daniel Struck <struck(dot)d(at)retrovirology(dot)lu>
Cc: Robert Treat <xzilla(at)users(dot)sourceforge(dot)net>, pgsql-php(at)postgresql(dot)org
Subject: Re: client authentication towards postgresql in php?
Date: 2003-11-13 22:13:51
Message-ID: 20031113221351.GA23638@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-php

On Wed, Nov 12, 2003 at 11:26:03 +0100,
Daniel Struck <struck(dot)d(at)retrovirology(dot)lu> wrote:
> On Tue, 11 Nov 2003 12:47:52 -0600
> Bruno Wolff III <bruno(at)wolff(dot)to> wrote:
>
> > If you trust the host the php/web server runs on you may be able to use
> > trust authentication. If you don't trust all of the users on that host
> > then you can use ident authentication, though if the db server and php/web
> > server aren't the same host using identd may slow things down too much.
>
> The web application, which will make the connection to the database, is normally running under the user apache, so I don't think I could use the ident method?

Sure you can. If you trust the apache user, you can use ident authentication
to allow it to connect as any of the valid users. It may be in your case
that you can't trust the apache user, but we don't know enough about your
setup to be able to tell that.

In response to

Browse pgsql-php by date

  From Date Subject
Next Message Noel 2003-11-18 02:33:30 Cancel a query when user leaves a web page
Previous Message Daniel Struck 2003-11-12 15:29:57 Re: client authentication towards postgresql in php?