To: pgsql-admin@postgresql.org
From: Thomas Kellerer <spam_eater@gmx.net>
Subject: Re: Getting "ident" to work in Windows
Date: Fri, 04 May 2012 15:50:06 +0200
Lines: 40
Message-ID: <jo0mnd$hg0$1@dough.gmane.org>
References: <jo0g4q$pq8$1@dough.gmane.org>
	<CABUevExk_aiXmyOKqYDPJfhvc+bTqWfSVa9XcUOGVAB961cPqw@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.8.1.23) Gecko/20090812 Thunderbird/2.0.0.23 Mnenhy/0.7.6.666
In-Reply-To: 
 <CABUevExk_aiXmyOKqYDPJfhvc+bTqWfSVa9XcUOGVAB961cPqw@mail.gmail.com>

Magnus Hagander, 04.05.2012 15:22:
>> I'm trying to enable "ident" authentication on my Windows machine using
>> PostgreSQL 9.1
>>
>> However as soon as I add the following line to pg_hba.conf
>>
>>    host    all             all             ::1/128            ident sameuser
>
> "sameuser" was removed in PostgreSQL 8.4. Now you just use "ident" if
> you want that behavior.

Thanks, I somehow missed that.

> It probably told you this in the logfile when you did reload - for
> security reasons, the details of the error are never given to an
> unauthenticated client.

No, I only got the could not load pg_hba.conf" error message.


>> Ideally I would like to make "ident" to work with a custom map but using
>> "ident tkmap". But that throws the same error which isn't really surprising
>> as "ident tkmap" is not working either.
>
> ident map=tkmap
>
> is what you want. See
> http://www.postgresql.org/docs/9.1/static/auth-methods.html#AUTH-IDENT

I still get an authentication error but probably that's because ident is indeed not available on Windows.
It's not that important as I just wanted to play around with it.


Thanks for the help.

Regards
Thomas