From: mkrist@binf.ku.dk
To: pgsql-admin@postgresql.org
Subject: Trouble setting up access privileges
Date: Mon, 15 Sep 2008 17:43:40 +0200
Message-ID: <20080915154340.GA15530@optiplex36> (raw)
Hi pgsql-admin mailing list,
I'm having some problems setting up access privileges via pg_hba.conf. The
problem is that it seems that some Linux user accounts have password-less
access to the pgsql databases via the 'pgsql' CLI tool even though I try to
enforce md5 password protection.
The relevant line in pg_hba.conf is this:
host all mette,mkrist 10.10.0.0 255.255.0.0 md5
If I'm logged in as the Linux user "mkrist" and try to log in to a database as
either the pgsql user "mette" or the pgsql user "mkrist" it requires me to
enter a password (which it then accepts and logs me in).
But if I'm OTOH logged in as the Linux user "mette" it only requires me to
enter a password if I try to login to a database with the pgsql user "mkrist"
(which it then accepts). If I try to login as the pgsql user "mette" it logs
in without asking for a password.
I can't find anything in the documentation about exceptions from the
pg_hba.conf rules, so I'm quite surprised by this behaviour.
Thank you, I'd appreciate any help.
--
Michael Kristensen <mkrist@binf.ku.dk>
IT-studentermedhjælper / Sysadm student aid
BINF
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: mkrist@binf.ku.dk
Subject: Re: Trouble setting up access privileges
In-Reply-To: <20080915154340.GA15530@optiplex36>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox