RES: BUG #4450: Postgres do not ask for passord

This is my pg_hba.conf:

# TYPE DATABASE USER CIDR-ADDRESS METHOD

host all postgres 0.0.0.0/0 reject

local bancoX userX trust

local all all md5

host all all 127.0.0.1/32 md5

host all userY 0.0.0.0/0 md5

host bancoX all 0.0.0.0/0 md5

host all all 0.0.0.0/0 reject

If I try a remote Access using psql or pgadmin and the user is userY it
Access and do not ask for password.

If I use other user it ask for password.

If I change the pg_hba.conf to

# TYPE DATABASE USER CIDR-ADDRESS METHOD

host all postgres 0.0.0.0/0 reject

local bancoX userX trust

local all all md5

host all all 127.0.0.1/32 md5

host all userY 0.0.0.0/0 reject

host bancoX all 0.0.0.0/0 md5

host all all 0.0.0.0/0 reject

It reject correctly my Access.

I realy think this is a bug.

I tryed drop and recreate the user and continue the same.

Tanks for help,

Carlos

De: Gurjeet Singh [mailto:singh(dot)gurjeet(at)gmail(dot)com]
Enviada em: domingo, 5 de outubro de 2008 19:59
Para: tomas(at)tuxteam(dot)de
Cc: Carlos; pgsql-bugs(at)postgresql(dot)org
Assunto: Re: [BUGS] BUG #4450: Postgres do not ask for passord

On Sun, Oct 5, 2008 at 10:06 PM, <tomas(at)tuxteam(dot)de> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Oct 05, 2008 at 02:42:31PM +0000, Carlos wrote:
>
> The following bug has been logged online:
>
> Bug reference: 4450
> Logged by: Carlos
> Email address: cadup(at)ig(dot)com(dot)br
> PostgreSQL version: 8.2
> Operating system: linux
> Description: Postgres do not ask for passord
> Details:
>
> I have one user that is a superuser. The pg_hba.conf is set to use md5
> specific to this user. When I connect the postgresql do not ask for the
> password. If I change the pg_hba.con to reject, it works. Do you know what
> is the problem?

Maybe you still have an entry like

local all all trust

somewhere in pg_hba.conf?

Posting both your versions of pg_hba.conf would help. (Strip out the
commented lines).

Best regards,

--
gurjeet[(dot)singh](at)EnterpriseDB(dot)com
singh(dot)gurjeet(at){ gmail | hotmail | indiatimes | yahoo }.com

EnterpriseDB http://www.enterprisedb.com

Mail sent from my BlackLaptop device