From: | "Jeanna Geier" <jgeier(at)apt-cafm(dot)com> |
---|---|
To: | "Jeff Frost" <jeff(at)frostconsultingllc(dot)com> |
Cc: | <pgsql-admin(at)postgresql(dot)org> |
Subject: | Re: pg_hba.conf: 'trust' vs. 'md5' Issues |
Date: | 2006-09-26 15:28:33 |
Message-ID: | 00cf01c6e180$6e21a500$6700a8c0@geier |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin pgsql-hackers |
Hi Jeff-
Thanks so much for the reply.
Yes, I have ssl=true in postgresql.conf. (password encryption is commented
out - is that OK?: #password_encryption = true)
Also, yes, server.crt is in the 'data' directory of my postgres server, as
is server.key.
And, yes, when I am able to start Postgres (when using 'trust' in the
pg_hba.conf file vs. 'md5'), I do so the 'SSL connection' line:
C:\msys\1.0\local\pgsql\bin>psql -d apt -U postgres
Welcome to psql 8.0.8, the PostgreSQL interactive terminal.
Type: \copyright for distribution terms
\h for help with SQL commands
\? for help with psql commands
\g or terminate with semicolon to execute query
\q to quit
SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
Warning: Console code page (437) differs from Windows code page (1252)
8-bit characters may not work correctly. See psql reference
page "Notes for Windows users" for details.
apt=#
It's only when I change the connection method to 'md5' that I'm running into
problems -- then I cannot connect from pgadmin or the command line.
Thanks,
-Jeanna
----- Original Message -----
From: "Jeff Frost" <jeff(at)frostconsultingllc(dot)com>
To: "Jeanna Geier" <jgeier(at)apt-cafm(dot)com>
Cc: <pgsql-admin(at)postgresql(dot)org>
Sent: Tuesday, September 26, 2006 10:05 AM
Subject: Re: [ADMIN] pg_hba.conf: 'trust' vs. 'md5' Issues
> On Tue, 26 Sep 2006, Jeff Frost wrote:
>
>> It seems that for some reason either your server or your client are not
>> trying to use SSL. Note the: "SSL off" in the error message you
>> received. Do you have a server.crt in the data directory of the postgres
>> server?
>>
>
> I guess I should have also asked if you have the
>
> ssl = true
>
> in postgresql.conf?
>
> ---
> Jeff Frost, Owner <jeff(at)frostconsultingllc(dot)com>
> Frost Consulting, LLC http://www.frostconsultingllc.com/
> Phone: 650-780-7908 FAX: 650-649-1954
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: Don't 'kill -9' the postmaster
>
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2006-09-26 15:31:41 | Re: Beginner's Question: No pg_hba.conf entry for host...SSL Off |
Previous Message | Juan Miguel Paredes | 2006-09-26 15:11:16 | Re: Beginner's Question: No pg_hba.conf entry for host...SSL Off |
From | Date | Subject | |
---|---|---|---|
Next Message | Zdenek Kotala | 2006-09-26 15:31:48 | horo(r)logy test fail on solaris (again and solved) |
Previous Message | Jim C. Nasby | 2006-09-26 15:13:29 | Re: Phantom Command ID |