Re: pg_hba changes not honored

From: "Sriram Dandapani" <sdandapani(at)counterpane(dot)com>
To: "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: <pgsql-admin(at)postgresql(dot)org>
Subject: Re: pg_hba changes not honored
Date: 2006-08-23 22:16:27
Message-ID: 6992E470F12A444BB787B5C937B9D4DF0574FF33@ca-mail1.cis.local
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

This is the complete pg_hba contents

local all all trust
# IPv4 local connections:
host all all 127.0.0.1/32 trust
#host all all 172.31.0.84/24 trust
# IPv6 local connections:
host all all ::1/128 trust

ps ax | grep INSERT shows a few processes from client machines not in
pg_hba.conf

The processes that do INSERTS keep appearing from other clients not in
pg_hba.conf

There is only 1 postmaster running

The connections that keep appearing are from jdbc clients.

-----Original Message-----
From: Tom Lane [mailto:tgl(at)sss(dot)pgh(dot)pa(dot)us]
Sent: Wednesday, August 23, 2006 3:11 PM
To: Sriram Dandapani
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: [ADMIN] pg_hba changes not honored

"Sriram Dandapani" <sdandapani(at)counterpane(dot)com> writes:
> When I update pg_hba.conf to disallow certain client machines from
> connectiong (update pg_hba.conf, pg_ctl reload), I still see new
> connections appearing in the process list from the clients I want to
> disconnect.

Sounds to me like a mistake in your pg_hba file, ie, there is still
a line that allows them to connect. We've also heard of people editing
the wrong copy of pg_hba.conf, or sighup'ing the wrong postmaster ...

regards, tom lane

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Tom Lane 2006-08-23 22:29:03 Re: pg_hba changes not honored
Previous Message Tom Lane 2006-08-23 22:10:57 Re: pg_hba changes not honored