Re: pg_hba.conf analysis tool

From: salah jubeh <s_jubeh(at)yahoo(dot)com>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: pgsql <pgsql-general(at)postgresql(dot)org>
Subject: Re: pg_hba.conf analysis tool
Date: 2014-02-14 16:24:08
Message-ID: 1392395048.71994.YahooMailNeo@web164804.mail.gq1.yahoo.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

>We are in the process of talking about this:

>    http://www.postgresql.org/message-id/86fvnm5t44.fsf@jerry.enova.com

> I know of no tool currently available.
Thank you, for the reply. I think, my case might be a little bit different.
I am working with several clusters and I find sometimes pg_hba rules which does not make sense. So, a tool which could give hints or detect bad configurations might help.

For example

local   all         appl1                          trust
local   all         appl1                          md5

Or  
host    all         all         IP_ADDRESS/24       md5
host    all         all         IP_ADDRESS/32       md5

OR
host    all         all         IP_ADDRESS/24       reject
host    all         all         IP_ADDRESS/32       md5
OR
host    all         all         IP_ADDRESS1/32       md5
host    all         all         IP_ADDRESS2/32       md5
host    all         all         IP_ADDRESS3/32       md5
host    all         all         IP_ADDRESS4/32       md5
....
which could be replaced
host    all         all         IP_ADDRESS1/24       md5

Regards

On Friday, February 14, 2014 4:39 PM, Bruce Momjian <bruce(at)momjian(dot)us> wrote:

On Fri, Feb 14, 2014 at 07:28:38AM -0800, salah jubeh wrote:

> Hello,
>
> I am looking for a tool that could help me in analyzing the pg_hab.conf file.
> For example , detecting duplicates, unused entries, and overlaping entries.

We are in the process of talking about this:

    http://www.postgresql.org/message-id/86fvnm5t44.fsf@jerry.enova.com

I know of no tool currently available.

--
  Bruce Momjian  <bruce(at)momjian(dot)us>        http://momjian.us
  EnterpriseDB                            http://enterprisedb.com

  + Everyone has their own god. +

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Reece Hart 2014-02-14 17:26:45 automatically refresh all materialized views?
Previous Message Bruce Momjian 2014-02-14 15:37:25 Re: pg_hba.conf analysis tool