Skip site navigation (1) Skip section navigation (2)

SSL and md5 password?

From: "Peter Koczan" <pjkoczan(at)gmail(dot)com>
To: "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org>
Subject: SSL and md5 password?
Date: 2008-10-29 17:07:03
Message-ID: (view raw, whole thread or download thread mbox)
Lists: pgsql-admin
Hi all,

I'm looking to add an md5-based user to a postgres server, and I can't
seem to get psql to connect using SSL. Normally I use Kerberos to
connect, and that works flawlessly with SSL. I'd much prefer to use
SSL connections, so I'm wondering if there's something I'm doing

Here's what happens with a Kerberos just fine,
connects using SSL:

$ /s/postgresql/bin/psql -h -p 5432 koczan_test
Welcome to psql 8.3.4, the PostgreSQL interactive terminal.

Type:  \copyright for distribution terms
       \h for help with SQL commands
       \? for help with psql commands
       \g or terminate with semicolon to execute query
       \q to quit

SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)


And an md5 connection...

$ /s/postgresql/bin/psql -h -p 5432 -U test_md5 koczan_test
Password for user test_md5:
psql: FATAL:  no pg_hba.conf entry for host "", user
"test_md5", database "koczan_test", SSL off

Here's my pg_hba.conf


# this part disables remote "postgres" superuser connections
hostssl all         postgres       krb5
hostssl all         postgres    krb5
hostssl all         postgres  krb5
hostssl all         postgres     reject
hostssl all         postgres   reject

# Testing out md5 users
hostssl all         test_md5     md5
hostssl all         test_md5   md5

# this part enables non-superuser connections
hostssl all         nobody     trust
hostssl all         nobody   trust
hostssl all         all     krb5
hostssl all         all   krb5

And "ssl = on" in my postgresql.conf.

Am I missing something, or am I just SOL when using SSL?



pgsql-admin by date

Next:From: Kevin GrittnerDate: 2008-10-29 17:12:54
Subject: Re: SSL and md5 password?
Previous:From: Alvaro HerreraDate: 2008-10-29 15:51:44
Subject: Re: drop role fails

Privacy Policy | About PostgreSQL
Copyright © 1996-2017 The PostgreSQL Global Development Group