pg.ddx.io  pgsql-sql@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Rossi, Maria <maria.rossi@jackson.com>
To: Sameer Kumar <sameer.kumar@ashnik.com>
Cc: 'pgsql-sql@lists.postgresql.org' <pgsql-sql@lists.postgresql.org>
Cc: 'pgsql-novice@lists.postgresql.org' <pgsql-novice@lists.postgresql.org>
Subject: RE: md5 and trust and pg_hba.conf
Date: Mon, 10 Sep 2018 15:22:43 +0000
Message-ID: <539851b398294c5994ee8c425c3710ac@DC03PXMBP003.jacksonnational.com> (raw)
In-Reply-To: <CADp-Sm446qLaiwW70SCykX-T_BMfd7kuUQgTey=u2mSDr6o=Kw@mail.gmail.com>
References: <daa1d04cccf6417e83a3f52cd8ab1781@DC03PXMBP003.jacksonnational.com>
	<CADp-Sm446qLaiwW70SCykX-T_BMfd7kuUQgTey=u2mSDr6o=Kw@mail.gmail.com>

Both have PGHOST set.   gd07 has a .pgpass, but psgdba does not.   Does it still need a .pgpass even if it is already ‘trust’?
Thanks.


Maria A Rossi
Database Administration
Jackson National Life
email: maria.rossi@jackson.com<mailto:maria.rossi@jackson.com>
cell phone: 517.256.4392
work phone: 517.367.3099
work phone extension: 23099

From: Sameer Kumar <sameer.kumar@ashnik.com>
Sent: Monday, September 10, 2018 10:55 AM
To: Rossi, Maria <maria.rossi@jackson.com>
Cc: pgsql-sql@lists.postgresql.org; pgsql-novice@lists.postgresql.org
Subject: Re: md5 and trust and pg_hba.conf

EXTERNAL EMAIL


On Mon, Sep 10, 2018 at 10:46 PM Rossi, Maria <maria.rossi@jackson.com<mailto:maria.rossi@jackson.com>> wrote:
Hi,

Question on pg_hba.conf.  I have these entries:

host    all             psgdba           localhost           trust
host    all             psgdba           127.0.0.1/32<http://127.0.0.1/32;            trust
host    all             gd07           localhost                trust
host    all             gd07            127.0.0.1/32<http://127.0.0.1/32;           trust


Can you post the whole of pg_hba.conf file?

You might have some other entry that is taking precedence.


Command to logon to Postgres:
/usr/pgsql-9.3/bin/psql -d postgres

If you don't have PGHOST set then most likely you are not going over a tcp connection (which is what host entries in pg_hba are used for). Instead the local entries of pg_hba are taking effect.


If I am logged on ‘gd07’  at the server , it lets me log-on to Postgres without prompting for password

do you have a *.pgpass* file in the home directory?

If I am logged on as ‘psgdba’, it prompts for password.
As you can see, both have ‘trust’, but ‘gd07’ is the instance owner.

Why does ‘psgdba’ prompts?  What I am missing?
Your help would be much appreciated.

Thanks.
Maria

--

--

Best Regards,

Sameer Kumar | Senior Solution Architect

ASHNIK PTE. LTD.

36 Robinson Road, #14-04 City House, Singapore 068877

T: +65 6438 3504 | www.ashnik.com<http://www.ashnik.com/;

Skype: sameer.ashnik |   M: +65 8110 0350

[Image removed by sender.]


Attachments:

~WRD000.jpg (image/jpeg, 823B) download view image

view thread (8+ messages)  latest in thread

Message-ID: <539851b398294c5994ee8c425c3710ac@DC03PXMBP003.jacksonnational.com>
Permalink:  ../539851b398294c5994ee8c425c3710ac@DC03PXMBP003.jacksonnational.com/
Also on:    postgresql.org/message-id/539851b398294c5994ee8c425c3710ac@DC03PXMBP003.jacksonnational.com

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-sql@postgresql.org
  Cc: maria.rossi@jackson.com, sameer.kumar@ashnik.com, pgsql-sql@lists.postgresql.org, pgsql-novice@lists.postgresql.org
  Subject: RE: md5 and trust and pg_hba.conf
  In-Reply-To: <539851b398294c5994ee8c425c3710ac@DC03PXMBP003.jacksonnational.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox