Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1c6OYf-0008OH-Lz for pgsql-admin@arkaria.postgresql.org; Mon, 14 Nov 2016 21:12:53 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1c6OYf-0005qZ-0d for pgsql-admin@arkaria.postgresql.org; Mon, 14 Nov 2016 21:12:53 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1c6OWx-0003yT-K8 for pgsql-admin@postgresql.org; Mon, 14 Nov 2016 21:11:07 +0000 Received: from mail-yb0-x22a.google.com ([2607:f8b0:4002:c09::22a]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.84_2) (envelope-from ) id 1c6OWq-0000MR-Ok for pgsql-admin@postgresql.org; Mon, 14 Nov 2016 21:11:06 +0000 Received: by mail-yb0-x22a.google.com with SMTP id a184so28957240ybb.0 for ; Mon, 14 Nov 2016 13:11:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-transfer-encoding:mime-version:date:subject:message-id :to; bh=HxJ7Su0EUcshpjpsWBVDMBgjCP/G8TecYhe67I359FU=; b=0moKP1oFKWmEXT7ed127LOis9ZfqUJ5s64IRzjeV83tVlucwU5j3C7u0aZJJstFiDG 1sdwNXCaYCg+Ol4UlU1X2T5vZX+/L7PaLfkhKGYjar8KQ4Jzmtg2jgWdscDPlwmvUybb qAECCTwMCEbOK11+evMck8NTRkNFVR9CX6s9NcqS0ssJ8t2LIkKIwyBqAV+QRRFkyLhT Zg/9jh2PdT3ZFYuHpvSQXji1MocUPhRHRHQoJKcTyJR1/L6PgLYRwqUSjrLiLRZOvs0/ 32toyZ9c31nYs2ixUPqyBE+tQgmi1Rp6wHoox5tVbhOcqv2qNzEldOASA6jabazsPB58 KlHQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-transfer-encoding:mime-version:date :subject:message-id:to; bh=HxJ7Su0EUcshpjpsWBVDMBgjCP/G8TecYhe67I359FU=; b=RDkGZ5U+ofrspnXvuJTLXylVFbof8gqsXaZg/aBc1qzz3s+c/dXJvaufVyOljqjxRK FQsKBT1k+tIIb1TsddTGbvp5DeERhlSywB+vYeoDOp0/IqZU/UYLgowuG7uVcdiks+2i hstUgtt6JNpXVmvKErNt4MTOu0pGODv6HI5ba5RtAxdALBTOK4dMNRQLYVSUKOm60RpE l82e88ZTyHRrckuCFGtMTGinl76GZNWd2di/iKadXQm2Dv8tdu3jezVgI5mlPNRnGdtF gp2ZdbKbccsPHcVU9Rnb4LU/fKpQwiRmXkRHm14EbdO0IcT5TkFiTGwYK+oP4FxPTybO rMjg== X-Gm-Message-State: ABUngvdtcmCgVP3UAsJ+tjqWd2S/ROkXmipAYT+iup3EGzI2P44I/8x9/CqvOukM3FbsvA== X-Received: by 10.37.29.133 with SMTP id d127mr16092037ybd.150.1479157859741; Mon, 14 Nov 2016 13:10:59 -0800 (PST) Received: from [172.24.130.77] (75-136-244-27.static.snfr.nc.charter.com. [75.136.244.27]) by smtp.gmail.com with ESMTPSA id k132sm4215401ywe.24.2016.11.14.13.10.59 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Nov 2016 13:10:59 -0800 (PST) From: John Scalia Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (1.0) Date: Mon, 14 Nov 2016 16:10:14 -0500 Subject: hostnossl in pg_hba.conf demands a password Message-Id: To: pgsql-admin@postgresql.org X-Mailer: iPad Mail (14B100) X-Pg-Spam-Score: -2.0 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org I've been experimenting a bit with both 9.4.10 and 9.6.0 and both of these = are exhibiting the same behavior. I've been setting up zabbix and the local= agent requires a trust connection. So, if my pg_hba.conf has a line: host all monitoring. 127.0.0.1/32. trust It works as I expected, but if I change "host" to "hostnossl" and reload, i= t then demands a password for the monitoring user. The servers are configured with SSL and all other connections require "host= ssl", but the zabbix agent is not configured with SSL. I'd say this behavio= r is a bug, but maybe I missed reading the fine manual somewhere. Has anyon= e else seen this or maybe the docs need updating. -- Jay Sent from my iPad --=20 Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin