From: | brodgers3(at)oreillyauto(dot)com |
---|---|
To: | pgsql-bugs(at)postgresql(dot)org |
Subject: | BUG #14333: Remote connections for members of role in pg_hba.conf |
Date: | 2016-09-21 16:53:36 |
Message-ID: | 20160921165336.1353.35389@wrigleys.postgresql.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-bugs |
The following bug has been logged on the website:
Bug reference: 14333
Logged by: B. Rodgers
Email address: brodgers3(at)oreillyauto(dot)com
PostgreSQL version: 9.3.13
Operating system: Ubuntu 14.04.4 LTS
Description:
--- create a role "read_group" with permissions to connect and select on all
objects
--- Similar, create new user to be managed by "read_group" permissions ---
CREATE ROLE myuser LOGIN CONNECTION LIMIT 5;
GRANT read_group TO myuser;
--- Verify user exists and is member of group "read_group" ---
mydb=> \dg myuser
List of roles
Role name | Attributes | Member of
-----------+---------------+------------------
myuser | 5 connections | {read_group}
--- pg_hba.conf entry intended to allow members of "read_group" to connect
---
host mydb +read_group 172.XX.YY.0/24 md5
--- Error received upon attempting remote connection ---
FATAL: no pg_hba.conf entry for host "172.XX.YY.ZZ", user "myuser", database
"mydb", SSL off
Expected either valid connection or password error.
Looking to control arbitrary large list of users with just a couple managed
roles such as "read" or "write" groups such that only the "read" and "write"
groups are specified in places like pg_hba.conf.
From | Date | Subject | |
---|---|---|---|
Next Message | jungleboogie0+psql | 2016-09-21 17:18:19 | BUG #14334: vacuumdb.c build failure on openbsd |
Previous Message | Heikki Linnakangas | 2016-09-21 12:50:51 | Re: BUG #13755: pgwin32_is_service not checking if SECURITY_SERVICE_SID is disabled |