Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1c6Oid-0000Mc-IE for pgsql-admin@arkaria.postgresql.org; Mon, 14 Nov 2016 21:23:11 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1c6Oid-0007zS-52 for pgsql-admin@arkaria.postgresql.org; Mon, 14 Nov 2016 21:23:11 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1c6Oic-0007zD-Ay for pgsql-admin@postgresql.org; Mon, 14 Nov 2016 21:23:10 +0000 Received: from mail-yb0-x22b.google.com ([2607:f8b0:4002:c09::22b]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.84_2) (envelope-from ) id 1c6OiZ-0000ZF-QX for pgsql-admin@postgresql.org; Mon, 14 Nov 2016 21:23:09 +0000 Received: by mail-yb0-x22b.google.com with SMTP id v78so29155182ybe.3 for ; Mon, 14 Nov 2016 13:23:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=n6UshriuQKMjE75HOkZAyvKHDQluZhGpzfqYx6jB0ek=; b=cm19HyqoVVhm4PW5u/zNJujGuwJWJrhMxOBzjmmlcQOCxHy2JKRSidR7Ts78iHhOzw I2nkwjYvMgSVP+UBCmdzKWL73rtsViABfciDFW+DZfvlCXUN8rIsmcTuhIYHX+hwjWpY /EjXy3YEERk/mqBa80CoZawdi0VExXl+Bzanzvm1rLXF7HBtoWgiyd8xJ0Z410XGKZoS 0lFgPnHrP/jYxyNuxGl3V4koGHYc6DERNiUZVcwchWorrdBXAFk/pEbJxkZRQZDA7K32 SYsWQiIMGWAn+z8S0YHwP3E2YvJairhC47qCR09CDHJnjk4caHVL5KEtfUUCqRMQeck7 8IRA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=n6UshriuQKMjE75HOkZAyvKHDQluZhGpzfqYx6jB0ek=; b=RHq28NSKYAuXt1ddrnQoEnkH+MN4xhy1ff7ArFVKe2/1RF8GcYp5aaZyQNdYm5gWGJ kqvXGlDYacjdknFearQRgXcZt5euxSTj/tU0Fw5V2tWj056+lY7+yQGyUNMIAQmHe4iw u7NqdVC/7cUNmabolBtLo0hIJqcvdWFnXoE8sg69sD622wYt6kt0UAKyQCTjV+AeCb4f 0kira/lKvsw4fgvJ0ID3iwitJ1aiIFyqChUVZpjzBEwhzpGeeX5n8jykX84UJVJqxa7L mgcRwKd5nHwPTIrlsz61WecaugTIf2i3us2jO0wuEZ1Pf7TzUi+qMgSMAVfrypaRaJE3 L2Vw== X-Gm-Message-State: ABUngve9+QESbI+loDxZW6l0Y58jijfX5AUL3dnjqv6U8YVMh/7XeWkkdcCgTxl3jh2XDg== X-Received: by 10.37.217.86 with SMTP id q83mr17262563ybg.97.1479158586558; Mon, 14 Nov 2016 13:23:06 -0800 (PST) Received: from [172.24.130.77] (75-136-244-27.static.snfr.nc.charter.com. [75.136.244.27]) by smtp.gmail.com with ESMTPSA id v137sm3638247ywa.30.2016.11.14.13.23.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Nov 2016 13:23:06 -0800 (PST) Content-Type: multipart/alternative; boundary=Apple-Mail-C95BC156-8C75-4EA8-86D1-26A18AFA1F16 Mime-Version: 1.0 (1.0) Subject: Re: hostnossl in pg_hba.conf demands a password From: John Scalia X-Mailer: iPad Mail (14B100) In-Reply-To: Date: Mon, 14 Nov 2016 16:23:05 -0500 Cc: pgsql-admin Content-Transfer-Encoding: 7bit Message-Id: <5878107F-B5AB-4AEB-8B52-987AF3DB1739@gmail.com> References: To: Venkata B Nagothi X-Pg-Spam-Score: -2.0 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org --Apple-Mail-C95BC156-8C75-4EA8-86D1-26A18AFA1F16 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable The only entries are a local connection line with md5 authentication specifi= ed and a line for local replication with a trust authentication. Both of the= se entries do seem to be working properly. Sent from my iPad > On Nov 14, 2016, at 4:20 PM, Venkata B Nagothi wrote: >=20 >=20 >> On Tue, Nov 15, 2016 at 8:10 AM, John Scalia wro= te: >> I've been experimenting a bit with both 9.4.10 and 9.6.0 and both of thes= e are exhibiting the same behavior. I've been setting up zabbix and the loca= l agent requires a trust connection. So, if my pg_hba.conf has a line: >>=20 >> host all monitoring. 127.0.0.1/32. tru= st >>=20 >> It works as I expected, but if I change "host" to "hostnossl" and reload,= it then demands a password for the monitoring user. >>=20 >> The servers are configured with SSL and all other connections require "ho= stssl", but the zabbix agent is not configured with SSL. I'd say this behavi= or is a bug, but maybe I missed reading the fine manual somewhere. Has anyon= e else seen this or maybe the docs need updating. > =20 > Do you have any other entries (for 127.0.0.1) in pg_hba.conf which is gene= rating this behaviour ? >=20 > Regards, >=20 > Venkata B N > Database Consultant >=20 > Fujitsu Australia --Apple-Mail-C95BC156-8C75-4EA8-86D1-26A18AFA1F16 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
The only entries are a local connectio= n line with md5 authentication specified and a line for local replication wi= th a trust authentication. Both of these entries do seem to be working prope= rly.

Sent from my iPad

On Nov 14, 2016, at 4:20 PM, Ven= kata B Nagothi <nag1010@gmail.com> wrote:


On Tue, Nov 15, 2016 a= t 8:10 AM, John Scalia <jayknowsunix@gmail.com> wrote:
I've been experimenting a b= it with both 9.4.10 and 9.6.0 and both of these are exhibiting the same beha= vior. I've been setting up zabbix and the local agent requires a trust conne= ction. So, if my pg_hba.conf has a line:

host         all          &= nbsp;     monitoring.          127.0.0.1/32.=     trust

It works as I expected, but if I change "host" to "hostnossl" and reload, it= then demands a password for the monitoring user.

The servers are configured with SSL and all other connections require "hosts= sl", but the zabbix agent is not configured with SSL. I'd say this behavior i= s a bug, but maybe I missed reading the fine manual somewhere. Has anyone el= se seen this or maybe the docs need updating.
 
<= div>Do you have any other entries (for 127.0.0.1) in pg_hba.conf which is ge= nerating this behaviour ?

Regards,

Venkata B N
Database Consu= ltant

Fujitsu Australia
= --Apple-Mail-C95BC156-8C75-4EA8-86D1-26A18AFA1F16--