From: | pauld(at)jobready(dot)com(dot)au |
---|---|
To: | pgsql-bugs(at)postgresql(dot)org |
Subject: | BUG #12260: trust entry in pg_hba not working as documented |
Date: | 2014-12-17 12:53:16 |
Message-ID: | 20141217125316.1322.19845@wrigleys.postgresql.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-bugs |
The following bug has been logged on the website:
Bug reference: 12260
Logged by: Paul De Audney
Email address: pauld(at)jobready(dot)com(dot)au
PostgreSQL version: 9.3.5
Operating system: Ubuntu 14.04 LTS
Description:
I have the following pg_hba entry on a PostgreSQL server (10.A.B.C)
host repmgr all 10.X.Y.Z/32 trust
(the user repmgr was created using "createuser --login --superuser repmgr"
via the postgres system account)
On the host 10.X.Y.Z I am attempting to connect to PgSQL using this
command:
psql -h 10.A.B.C -U repmgr -d mydb
And this requests a password and then fails on a empty password or non-valid
password that I input. I am expecting authentication to work successfully
due to the use of the "trust" auth method.
When I comment out my pg_hba entry
host all all 10.X.Y.Z/24 md5
(this pg_hba entry is after my trust entry, if that matters)
I receive the following client side error:
psql: FATAL: no pg_hba.conf entry for host "10.A.B.C", user "repmgr",
database "mydb", SSL on
FATAL: no pg_hba.conf entry for host "10.A.B.C", user "repmgr", database
"mydb", SSL off
Which to me indicates that the trust entry in the pg_hba is not being parsed
by PostgreSQL at all.
When I set a password on the repmgr role and use that, authentication does
work. Which at the moment I am "working around my insecure intent" by using
a pgpass.
From | Date | Subject | |
---|---|---|---|
Next Message | Alvaro Herrera | 2014-12-17 14:18:36 | Re: BUG #11768: "jsonb ?" - not support int type operator |
Previous Message | fcs1 | 2014-12-17 12:51:17 | BUG #12259: Bug in restore Serial definition |