From: John Scalia <jayknowsunix@gmail.com>
To: pgsql-admin@postgresql.org
Subject: hostnossl in pg_hba.conf demands a password
Date: Mon, 14 Nov 2016 16:10:14 -0500
Message-ID: <BE1F46E9-B06A-4FE4-A2BF-D470E2488CEA@gmail.com> (raw)
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
I've been experimenting a bit with both 9.4.10 and 9.6.0 and both of these are exhibiting the same behavior. I've been setting up zabbix and the local agent requires a trust connection. So, if my pg_hba.conf has a line:
host all monitoring. 127.0.0.1/32. trust
It works as I expected, but if I change "host" to "hostnossl" and reload, it then demands a password for the monitoring user.
The servers are configured with SSL and all other connections require "hostssl", but the zabbix agent is not configured with SSL. I'd say this behavior is a bug, but maybe I missed reading the fine manual somewhere. Has anyone else seen this or maybe the docs need updating.
--
Jay
Sent from my iPad
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: jayknowsunix@gmail.com
Subject: Re: hostnossl in pg_hba.conf demands a password
In-Reply-To: <BE1F46E9-B06A-4FE4-A2BF-D470E2488CEA@gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox