From: Achilleas Mantzios <achill@matrix.gatewaynet.com>
To: pgsql-admin@postgresql.org
Subject: Re: Nesting records in pg_hba.conf
Date: Tue, 20 Dec 2016 15:37:23 +0200
Message-ID: <58593413.9070105@matrix.gatewaynet.com> (raw)
In-Reply-To: <CAAOuvVowx5ax_+wvWLRFkPg-2_uvPZZho5gSyAiah4f43pbf1g@mail.gmail.com>
References: <CAAOuvVowx5ax_+wvWLRFkPg-2_uvPZZho5gSyAiah4f43pbf1g@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
On 20/12/2016 14:12, Poul Kristensen wrote:
> Hi !
>
> Could anyone inform which records it is possible to nest the pg_hba.conf file?
>
> 1. My experience is that replication and local authentication can be active at the same time in pg_hba.conf,
>
pg_hba is consulted in a top->down fashion. If a certain line satisfies the criteria then this is chosen. Basically for every successful connection you have only one corresponding line in pg_hba.conf.
It doesn't fall through. So you got only one "active" line.
> 2. But my experience too is that when authentication through ldap is activated then only this is possible and NOT in combination with another active record.
>
> Does anyone agree with number 2.?
>
> Thanks
> Poul
>
>
--
Achilleas Mantzios
IT DEV Lead
IT DEPT
Dynacom Tankers Mgmt
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: achill@matrix.gatewaynet.com
Subject: Re: Nesting records in pg_hba.conf
In-Reply-To: <58593413.9070105@matrix.gatewaynet.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox