Skip site navigation (1) Skip section navigation (2)

Re: Need help in enabling remote connection

From: Scott Marlowe <scott(dot)marlowe(at)gmail(dot)com>
To: Shruthi A <shruthi(dot)iisc(at)gmail(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: Need help in enabling remote connection
Date: 2009-11-03 18:10:57
Message-ID: dcc563d10911031010v45f7f8ct7e5bfde83c590a59@mail.gmail.com (view raw or flat)
Thread:
Lists: pgsql-admin
On Tue, Nov 3, 2009 at 1:53 AM, Shruthi A <shruthi(dot)iisc(at)gmail(dot)com> wrote:
> Hi all,
>
> Thanks a lot for all your replies.  The problem is solved now.  This is the
> correct thing to do:    listen_addresses = '*'
> And then restart the service.
>
> Additional notes:
> -- Remember to use single quotes around the * else it will give syntax
> error.
> -- The listen_addresses parameter specifies the client addresses, and not
> the server.

No, the listen_address specifies which SERVER ip address to listen on.
 * means to listen on all interfaces.  You can pick individual
interfaces to listen on on the server by changing * to one of a
server's IP addresses.

> -- Once this service is started, telneting the server on the given port
> successfully connects.
> -- Dear Ian Lea, i guess 10.0.0.1/24  is the same as 10.0.0.0/24  as the
> mask '24' means that the first 3 octets (24 bits from the left hand side)
> must match ie both mean simply 10.0.0.*

Actually 10.0.0.0/24 means that the right hand 24 bits don't matter,
so anything starting with 10. will match.

> -- And i think 'trust' should be fine assuming that this will be used on an
> isolated network with a few trusted machines or a secure network where a
> firewall protects a given set of ports.

Exactly.  Most databases used by an application are firewalled off in
such a way that having strict passworded access just moves the place
your vulnerable to db hacking from the db to the app.

> -- Dear Brian Modra, i guess   listen_addresses = 'localhost,10.0.0.123'
> will give error. It should be written as   listen_addresses =
> 'localhost','10.0.0.123'  that is each IP should be quoted separately.

Yep.  same is true for things like search_path.

Glad you're up and running.  Hope you're having fun with your db.

In response to

Responses

pgsql-admin by date

Next:From: Scott MarloweDate: 2009-11-03 18:14:08
Subject: Re: Please Help... Service fails to start
Previous:From: Lewis KapellDate: 2009-11-03 14:54:12
Subject: Re: fighting '<IDLE> in transaction'

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group