Re: pg_hba.conf: 'trust' vs. 'md5' Issues

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Jeff Frost <jeff(at)frostconsultingllc(dot)com>
Cc: Jeanna Geier <jgeier(at)apt-cafm(dot)com>, pgsql-admin(at)postgresql(dot)org, pgsql-hackers(at)postgresql(dot)org
Subject: Re: pg_hba.conf: 'trust' vs. 'md5' Issues
Date: 2006-09-26 16:32:47
Message-ID: 26939.1159288367@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin pgsql-hackers

Jeff Frost <jeff(at)frostconsultingllc(dot)com> writes:
> Interestingly, I receive the same error when I disable SSL on the server:

If SSL is disabled then hostssl lines in pg_hba.conf effectively become
no-ops --- they can never be matched since no incoming connection will
be SSL-ified. So that part of it sounds reasonable to me. (Perhaps we
could log some kind of complaint in this case, though the easy places
to put in such a message would generate an unacceptably large number of
repetitions of the message :-()

> But, when I put the trust line back with hostssl, I do not get connected as
> per her original indication.

Please be clearer about what you mean here --- Jeanna *was* able to
connect in this case, if I'm not totally confused.

regards, tom lane

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Jeff Frost 2006-09-26 16:40:34 Re: pg_hba.conf: 'trust' vs. 'md5' Issues
Previous Message Jeff Frost 2006-09-26 16:17:08 Re: pg_hba.conf: 'trust' vs. 'md5' Issues

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2006-09-26 16:39:01 Re: Block B-Tree concept
Previous Message Heikki Linnakangas 2006-09-26 16:27:56 Re: Block B-Tree concept