Re: pg_hba.conf: 'trust' vs. 'md5' Issues

From: "Jeanna Geier" <jgeier(at)apt-cafm(dot)com>
To: "Jeff Frost" <jeff(at)frostconsultingllc(dot)com>
Cc: <pgsql-admin(at)postgresql(dot)org>
Subject: Re: pg_hba.conf: 'trust' vs. 'md5' Issues
Date: 2006-09-26 15:28:33
Message-ID: 00cf01c6e180$6e21a500$6700a8c0@geier
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin pgsql-hackers

Hi Jeff-

Thanks so much for the reply.

Yes, I have ssl=true in postgresql.conf. (password encryption is commented
out - is that OK?: #password_encryption = true)

Also, yes, server.crt is in the 'data' directory of my postgres server, as
is server.key.

And, yes, when I am able to start Postgres (when using 'trust' in the
pg_hba.conf file vs. 'md5'), I do so the 'SSL connection' line:

C:\msys\1.0\local\pgsql\bin>psql -d apt -U postgres
Welcome to psql 8.0.8, the PostgreSQL interactive terminal.

Type: \copyright for distribution terms
\h for help with SQL commands
\? for help with psql commands
\g or terminate with semicolon to execute query
\q to quit

SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)

Warning: Console code page (437) differs from Windows code page (1252)
8-bit characters may not work correctly. See psql reference
page "Notes for Windows users" for details.

apt=#

It's only when I change the connection method to 'md5' that I'm running into
problems -- then I cannot connect from pgadmin or the command line.

Thanks,
-Jeanna

----- Original Message -----
From: "Jeff Frost" <jeff(at)frostconsultingllc(dot)com>
To: "Jeanna Geier" <jgeier(at)apt-cafm(dot)com>
Cc: <pgsql-admin(at)postgresql(dot)org>
Sent: Tuesday, September 26, 2006 10:05 AM
Subject: Re: [ADMIN] pg_hba.conf: 'trust' vs. 'md5' Issues

> On Tue, 26 Sep 2006, Jeff Frost wrote:
>
>> It seems that for some reason either your server or your client are not
>> trying to use SSL. Note the: "SSL off" in the error message you
>> received. Do you have a server.crt in the data directory of the postgres
>> server?
>>
>
> I guess I should have also asked if you have the
>
> ssl = true
>
> in postgresql.conf?
>
> ---
> Jeff Frost, Owner <jeff(at)frostconsultingllc(dot)com>
> Frost Consulting, LLC http://www.frostconsultingllc.com/
> Phone: 650-780-7908 FAX: 650-649-1954
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: Don't 'kill -9' the postmaster
>

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Tom Lane 2006-09-26 15:31:41 Re: Beginner's Question: No pg_hba.conf entry for host...SSL Off
Previous Message Juan Miguel Paredes 2006-09-26 15:11:16 Re: Beginner's Question: No pg_hba.conf entry for host...SSL Off

Browse pgsql-hackers by date

  From Date Subject
Next Message Zdenek Kotala 2006-09-26 15:31:48 horo(r)logy test fail on solaris (again and solved)
Previous Message Jim C. Nasby 2006-09-26 15:13:29 Re: Phantom Command ID