| From: | Bruno Wolff III <bruno(at)wolff(dot)to> |
|---|---|
| To: | FM <dist-list(at)LEXUM(dot)UMontreal(dot)CA> |
| Cc: | Mailing List Postgres-Admin <pgsql-admin(at)postgresql(dot)org> |
| Subject: | Re: pg_hba and * |
| Date: | 2004-12-16 17:23:03 |
| Message-ID: | 20041216172303.GB11300@wolff.to |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-admin |
On Thu, Dec 16, 2004 at 10:52:31 -0500,
FM <dist-list(at)LEXUM(dot)UMontreal(dot)CA> wrote:
> Hello,
> We have kerberos auth for all humain users, but I still need md5 auth
> for scripts users.
>
> All my scripts user name start with soft_
>
> Can I add soft_* in the pg_hba ?
You can't do pattern matching there.
It probably wouldn't be that hard to make a custom change to allow
some sort of pattern matching.
Another option would be to have a script that updates pg_hba.conf
as needed (and signal the server).
Yet another possible option (if the scripts are only run from the server)
is to use md5 for domain socket connections and kerberos for tcp/ip
connections.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tom Lane | 2004-12-16 17:27:25 | Re: Notifications |
| Previous Message | Michael Fuhr | 2004-12-16 17:13:20 | Re: missing schemas from template1 |