Re: Selective authentication?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Charley L(dot) Tiggs" <ctiggs(at)xpressdocs(dot)com>
Cc: pgsql-novice(at)postgresql(dot)org, kynn(at)panix(dot)com
Subject: Re: Selective authentication?
Date: 2005-08-26 04:34:15
Message-ID: 5350.1125030855@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-novice

"Charley L. Tiggs" <ctiggs(at)xpressdocs(dot)com> writes:
> For information on setting up a .pgpass file:
> http://www.postgresql.org/docs/8.0/static/libpq-pgpass.html

.pgpass for everyone is one way, but there are others. If this is
all going to be local connections, you could also think about
setting up your pg_hba.conf file along the lines of

local any dbadmin md5
local any any ident

This would have the effect of requiring a password from anyone trying to
log in as dbadmin. For every other database user name, there'd be a
check that they were logged in under the same Unix user name, and if so
they'd be let in without a password.

Ident is not too trustworthy across the network, but for local
connections it should be fine.

regards, tom lane

In response to

Browse pgsql-novice by date

  From Date Subject
Next Message Charley L. Tiggs 2005-08-26 14:51:49 Re: SQL problem?
Previous Message Tom Lane 2005-08-26 04:17:09 Re: Copy Failure