Using both ident and password in pg_hba.conf

From: "D'Arcy J(dot)M(dot) Cain" <darcy(at)druid(dot)net>
To: PostgreSQL General <pgsql-general(at)postgresql(dot)org>
Subject: Using both ident and password in pg_hba.conf
Date: 2016-05-09 19:44:28
Message-ID: 20160509154428.0ab363bf@imp
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Here's my situation. I have a mix of users. Some are running PHP
sites and some are not. PHP runs as the web server owner, "nobody."
Everyone else runs as their own user.

Since the PHP sites run as nobody I want to require password but accept
ident (from the server I control) for the rest. There does not appear
to be a way to specif that. Here was one attempt:

host all nobody 192.168.151.75/32 password
host all all 192.168.151.75/32 ident

But that doesn't work. The actual user according to ident is nobody
but the request is for a specific user. As a result it isn't
recognized by the first line so it tries ident anyway and fails.

Is there any way to accomplish what I want? Any help appreciated.

Cheers.

--
D'Arcy J.M. Cain <darcy(at)druid(dot)net> | Democracy is three wolves
http://www.druid.net/darcy/ | and a sheep voting on
+1 416 788 2246 (DoD#0082) (eNTP) | what's for dinner.
IM: darcy(at)Vex(dot)Net, VoIP: sip:darcy(at)druid(dot)net

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Adrian Klaver 2016-05-09 20:02:53 Re: Using both ident and password in pg_hba.conf
Previous Message Christoph Berg 2016-05-09 18:54:28 Re: Ubuntu/Debian PGDP