Trouble setting up access privileges

From: mkrist(at)binf(dot)ku(dot)dk
To: pgsql-admin(at)postgresql(dot)org
Subject: Trouble setting up access privileges
Date: 2008-09-15 15:43:40
Message-ID: 20080915154340.GA15530@optiplex36
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Hi pgsql-admin mailing list,

I'm having some problems setting up access privileges via pg_hba.conf. The
problem is that it seems that some Linux user accounts have password-less
access to the pgsql databases via the 'pgsql' CLI tool even though I try to
enforce md5 password protection.

The relevant line in pg_hba.conf is this:
host all mette,mkrist 10.10.0.0 255.255.0.0 md5

If I'm logged in as the Linux user "mkrist" and try to log in to a database as
either the pgsql user "mette" or the pgsql user "mkrist" it requires me to
enter a password (which it then accepts and logs me in).

But if I'm OTOH logged in as the Linux user "mette" it only requires me to
enter a password if I try to login to a database with the pgsql user "mkrist"
(which it then accepts). If I try to login as the pgsql user "mette" it logs
in without asking for a password.

I can't find anything in the documentation about exceptions from the
pg_hba.conf rules, so I'm quite surprised by this behaviour.

Thank you, I'd appreciate any help.

--
Michael Kristensen <mkrist(at)binf(dot)ku(dot)dk>
IT-studentermedhjælper / Sysadm student aid
BINF

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Scott Marlowe 2008-09-15 15:53:53 Re: Heavy postgres process
Previous Message KKreuzer 2008-09-15 15:31:21 ERROR: could not open relation 16388/24734/51896: Cannot open or remove a file containing a running program.