ident authentication over tcp

From: Peter Koczan <pjkoczan(at)gmail(dot)com>
To: pgsql-admin(at)postgresql(dot)org
Subject: ident authentication over tcp
Date: 2009-12-09 17:25:13
Message-ID: 4544e0330912090925h2cd7d182h7604244948b582c5@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Hi all,

I'm having some trouble configuring ident authentication for TCP
connections. I can get it to work fine for local connections, but I
can't

Local connection:

$ psql postgres
...
postgres=>

Server Log:
Dec 9 11:06:59 mitchell postgres[27482]: [4-1] LOG: connection
received: host=[local]
Dec 9 11:06:59 mitchell postgres[27482]: [5-1] LOG: connection
authorized: user=koczan database=postgres
Dec 9 11:07:03 mitchell postgres[27482]: [6-1] LOG: disconnection:
session time: 0:00:04.370 user=koczan database=postgres host=[local]

Remote connection to localhost:
$ psql -h localhost postgres
psql: FATAL: no pg_hba.conf entry for host "127.0.0.1", user
"koczan", database "postgres", SSL off

Server log:
Dec 9 11:07:06 mitchell postgres[27494]: [4-1] LOG: connection
received: host=localhost port=41434
Dec 9 11:07:06 mitchell postgres[27494]: [5-1] LOG: could not
connect to Ident server at address "127.0.0.1", port 113: Connection
refused
Dec 9 11:07:06 mitchell postgres[27494]: [6-1] FATAL: Ident
authentication failed for user "koczan"
Dec 9 11:07:06 mitchell postgres[27495]: [4-1] LOG: connection
received: host=localhost port=41435
Dec 9 11:07:06 mitchell postgres[27495]: [5-1] FATAL: no pg_hba.conf
entry for host "127.0.0.1", user "koczan", database "postgres", SSL
off

My pg_hba.conf file looks like this:
# TYPE DATABASE USER CIDR-ADDRESS METHOD

local all koczan ident sameuser
hostssl all koczan 127.0.0.1/32 ident sameuser

I'm running Red Hat Enterprise 5.4, and I can't find any place where
an ident server is actually running on this host.

How is it working for local connections, and what might I be able to
do to get it to work for localhost TCP connections.

Thanks,
Peter

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message lst_hoe02 2009-12-09 19:25:23 Re: ident authentication over tcp
Previous Message Tom Lane 2009-12-09 14:28:47 Re: [ADMIN] recovery is stuck when children are not processing SIGQUIT from previous crash