Skip site navigation (1) Skip section navigation (2)

Re: pg_hba.conf: 'trust' vs. 'md5' Issues

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Jeanna Geier" <jgeier(at)apt-cafm(dot)com>
Cc: "Jeff Frost" <jeff(at)frostconsultingllc(dot)com>, pgsql-admin(at)postgresql(dot)org, pgsql-hackers(at)postgresql(dot)org
Subject: Re: pg_hba.conf: 'trust' vs. 'md5' Issues
Date: 2006-09-26 15:52:39
Message-ID: 26303.1159285959@sss.pgh.pa.us (view raw or flat)
Thread:
Lists: pgsql-adminpgsql-hackers
"Jeanna Geier" <jgeier(at)apt-cafm(dot)com> writes:
> [ hostssl works with 'trust' but not 'md5' ]
> It's only when I change the connection method to 'md5' that I'm running into 
> problems -- then I cannot connect from pgadmin or the command line.

I experimented with this using CVS HEAD, and found that SSL+md5 works
fine as long as I enter the correct password ... but if I give a wrong
password I get

$ psql -h localhost regression
Password:
psql: FATAL:  no pg_hba.conf entry for host "127.0.0.1", user "tgl", database "regression", SSL off
$

which is at best pretty misleading :-(.  I think libpq is probably
mishandling the "bad password" error and concluding that it should fall
back to a non-SSL connection, which the server then rejects.  Will look
into it.

As for Jeanna's problem, I don't see any password prompt at all in her
example.  I've forgotten the details, but wasn't there a password
prompting problem with 8.0.x on Windows?

			regards, tom lane

In response to

Responses

pgsql-hackers by date

Next:From: Andrew DunstanDate: 2006-09-26 15:55:52
Subject: Re: horo(r)logy test fail on solaris (again and solved)
Previous:From: Jeff FrostDate: 2006-09-26 15:51:56
Subject: Re: pg_hba.conf: 'trust' vs. 'md5' Issues

pgsql-admin by date

Next:From: Jeff FrostDate: 2006-09-26 15:58:16
Subject: Re: pg_hba.conf: 'trust' vs. 'md5' Issues
Previous:From: Jeff FrostDate: 2006-09-26 15:51:56
Subject: Re: pg_hba.conf: 'trust' vs. 'md5' Issues

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group