Skip site navigation (1) Skip section navigation (2)

Re: pg_hba.conf

From: KÖPFERL Robert <robert(dot)koepferl(at)sonorys(dot)at>
To: PostgreSQL Admin <pgsql-admin(at)postgresql(dot)org>
Subject: Re: pg_hba.conf
Date: 2005-02-22 12:21:51
Message-ID: ED4E30DD9C43D5118DFB00508BBBA76EB165D6@neptun.sonorys.at (view raw or flat)
Thread:
Lists: pgsql-admin
According to the excelent doc, the _first_ matching entry will be used.

C:\> -----Original Message-----
C:\> From: Dick Davies [mailto:rasputnik(at)hellooperator(dot)net]
C:\> Sent: Dienstag, 22. Februar 2005 12:57
C:\> To: PostgreSQL Admin
C:\> Subject: [ADMIN] pg_hba.conf
C:\> 
C:\> 
C:\> 
C:\> Just needed clarification on how pg_hba.conf operates.
C:\> Does a specific host take precedence over a more general 
C:\> network setting?
C:\> 
C:\> The local socket is only accessible to a certain group, 
C:\> but I don't want
C:\> the overhead of SSL for loopback connections. If I connect 
C:\> to the server 
C:\> from the local machine, the connections show up as (eg) 
C:\> 10.2.3.4, the NIC
C:\> ip.
C:\> 
C:\> I was hoping the more specific 'host' entry would take 
C:\> entry over the universal
C:\> 'hostssl' entry, but it does'nt seem to...
C:\> 
C:\> I have this:
C:\> 
C:\> root(at)eris:postgresql80-server$ cat /opt/pgsql/data/pg_hba.conf
C:\> # TYPE     DATABASE    USER        IP-ADDRESS      METHOD
C:\> local      all         all                         trust
C:\> host    all         all         10.2.3.4/32   md5
C:\> hostssl    all         all      0.0.0.0/0   md5
C:\> 
C:\> Is there a way to say 'all IP traffic should be encrypted 
C:\> except one IP' that
C:\> I'm missing?
C:\> 
C:\> I know I could just add the local process into the dba 
C:\> group, but the app doesn't 
C:\> reconnect if the socket goes away on a db restart, so 
C:\> that's not ideal...
C:\> 
C:\> 
C:\> -- 
C:\> 'That question was less stupid; though you asked it in a 
C:\> profoundly stupid way.'
C:\> 		-- Prof. Farnsworth
C:\> Rasputin :: Jack of All Trades - Master of Nuns
C:\> 
C:\> ---------------------------(end of 
C:\> broadcast)---------------------------
C:\> TIP 7: don't forget to increase your free space map settings
C:\> 

Responses

pgsql-admin by date

Next:From: Dick DaviesDate: 2005-02-22 13:26:15
Subject: Re: pg_hba.conf
Previous:From: Dick DaviesDate: 2005-02-22 11:56:41
Subject: pg_hba.conf

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group