Skip site navigation (1) Skip section navigation (2)

RE: [INTERFACES] pgaccess on win95 connection

From: eem21(at)cam(dot)ac(dot)uk
To: bbarnes(at)operamail(dot)com
Cc: lamar(dot)owen(at)wgcr(dot)org, pgsql-interfaces(at)postgresql(dot)org
Subject: RE: [INTERFACES] pgaccess on win95 connection
Date: 1999-11-30 01:21:15
Message-ID: E11sbx1-0003in-00@orange.csi.cam.ac.uk (view raw or flat)
Thread:
Lists: pgsql-interfaces
On 29 Nov, Bill Barnes wrote:
>>

> [ Snip config. hints]
> 
> Found in this file 2 lines:
>   'local              all
>           trust'
>   'host              all              127.0.0.1         255.255.255.255.   
> trust'
> While this is not the ultimate security :-) doesn't it render the host 
> accessible.

No.  These two lines allow (respectively) access from the server machine
over UDP and access from the server machine over TCP.  Neither line
allows access from outside the server machine.  What you want is
something like:

host	all	192.168.1.0	255.255.255.0		trust

where the two numbers are IP addresses and masks suitable for your LAN,
or

host	all	192.168.1.123	255.255.255.255		trust

where 192.168.1.123 is the IP address of the (single) Windows machine
from which you are connecting.  And of course you want to consider the
security implications of trusting the Windows machine to tell you who
is logged on, etc.  You may want to look at the other authentication
methods available.

> [ Snip more admin hints ]

HTH,

Ewan.


In response to

pgsql-interfaces by date

Next:From: eem21Date: 1999-11-30 02:18:02
Subject: Re: [INTERFACES] libpq + multiple connections ...
Previous:From: Lamar OwenDate: 1999-11-30 00:58:00
Subject: Re: [INTERFACES] pgaccess on win95 connection

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group