Re: ident authentication over tcp

Zitat von Peter Koczan <pjkoczan(at)gmail(dot)com>:

> Hi all,
>
> I'm having some trouble configuring ident authentication for TCP
> connections. I can get it to work fine for local connections, but I
> can't
>
> Local connection:
>
> $ psql postgres
> ...
> postgres=>
>
> Server Log:
> Dec 9 11:06:59 mitchell postgres[27482]: [4-1] LOG: connection
> received: host=[local]
> Dec 9 11:06:59 mitchell postgres[27482]: [5-1] LOG: connection
> authorized: user=koczan database=postgres
> Dec 9 11:07:03 mitchell postgres[27482]: [6-1] LOG: disconnection:
> session time: 0:00:04.370 user=koczan database=postgres host=[local]
>
> Remote connection to localhost:
> $ psql -h localhost postgres
> psql: FATAL: no pg_hba.conf entry for host "127.0.0.1", user
> "koczan", database "postgres", SSL off
>
> Server log:
> Dec 9 11:07:06 mitchell postgres[27494]: [4-1] LOG: connection
> received: host=localhost port=41434
> Dec 9 11:07:06 mitchell postgres[27494]: [5-1] LOG: could not
> connect to Ident server at address "127.0.0.1", port 113: Connection
> refused

This looks like you have no ident server running...

> Dec 9 11:07:06 mitchell postgres[27494]: [6-1] FATAL: Ident
> authentication failed for user "koczan"
> Dec 9 11:07:06 mitchell postgres[27495]: [4-1] LOG: connection
> received: host=localhost port=41435
> Dec 9 11:07:06 mitchell postgres[27495]: [5-1] FATAL: no pg_hba.conf
> entry for host "127.0.0.1", user "koczan", database "postgres", SSL
> off
>
> My pg_hba.conf file looks like this:
> # TYPE DATABASE USER CIDR-ADDRESS METHOD
>
> local all koczan ident sameuser
> hostssl all koczan 127.0.0.1/32 ident sameuser
>
> I'm running Red Hat Enterprise 5.4, and I can't find any place where
> an ident server is actually running on this host.

I guess you must install it first in recent distros, as there is not
much use of ident anymore. So you have to search the packages for your
OS.

Regards

Andreas