Subject: Re: Nesting records in pg_hba.conf
To: pgsql-admin@postgresql.org
References: 
 <CAAOuvVowx5ax_+wvWLRFkPg-2_uvPZZho5gSyAiah4f43pbf1g@mail.gmail.com>
From: Achilleas Mantzios <achill@matrix.gatewaynet.com>
Message-ID: <58593413.9070105@matrix.gatewaynet.com>
Date: Tue, 20 Dec 2016 15:37:23 +0200
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101
 Thunderbird/38.4.0
MIME-Version: 1.0
In-Reply-To: 
 <CAAOuvVowx5ax_+wvWLRFkPg-2_uvPZZho5gSyAiah4f43pbf1g@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: pgsql-admin-owner@postgresql.org

On 20/12/2016 14:12, Poul Kristensen wrote:
> Hi !
>
> Could anyone inform which records it is possible to nest the pg_hba.conf file?
>
> 1. My experience is that replication and local authentication can be active at the same time in pg_hba.conf,
>
pg_hba is consulted in a top->down fashion. If a certain line satisfies the criteria then this is chosen. Basically for every successful connection you have only one corresponding line in pg_hba.conf. 
It doesn't fall through. So you got only one "active" line.
> 2. But my experience too is that when authentication through ldap is activated then only this is possible and NOT in combination with another active record.
>
> Does anyone agree with number 2.?
>
> Thanks
> Poul
>
>


-- 
Achilleas Mantzios
IT DEV Lead
IT DEPT
Dynacom Tankers Mgmt


-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin