Marc Ende <me(at)marc-ende(dot)de> writes:
> In the "old" pg_hba.conf I had the both lines in the pg_hba.conf:
> local all password
> host all 127.0.0.1 255.255.255.255 password
That should still work ...
> now I've tried the same but now I can logon as a valid user with an
> invalid password. Postgres now allows to login with any valid
> username without specifying a password.
Did you SIGHUP the postmaster after editing the pg_hba.conf file?
Are you sure you are editing the same file the postmaster is looking at?
regards, tom lane