Re: usernames and passwords

From: Vicente Vives <vicent(at)aimplas(dot)es>
To: Artur Pietruk <arturp(at)plukwa(dot)pdi(dot)net>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: usernames and passwords
Date: 2002-07-22 12:15:22
Message-ID: 3D3BF75A.BBA16AA6@aimplas.es
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Artur Pietruk wrote:
>
> On Mon, Jul 22, 2002 at 12:16:53PM +0200, Vicente Vives wrote:
> > Hi .
>
> Hello!
>
> > I have a server running PostgreSQL Version 6.5, and i have a problem.
> > I grant some distinct privileges to some users (and that works). The
> > problem
> > is that those users can log in with any password. Each user has a
> > password
> > assigned but not matter the password the user use to log in, if the user
> > exists always will get access to the database.
>
> Go to your $PGDATA directory, and check your pg_hba.conf. That's
> file where you can confiure access do your db - it is wery well commented,
> read it and you will find out what to do (if not, go to docs and read about
> pg_hba.conf). It looks, that you may have "trust" enabled for local
> connections (or for whatever way they are connecting), or something like
> that, and that is why users are authenticated without their passwords.
>

That's correct!
In my pg_hba.conf the option 'trust' was enabled. If i changed it to
'crypt' the users can access correctly.

Thank you very much!

Vicent Vives.

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Ronny Theunissen 2002-07-22 12:35:50 using an index with like-operator
Previous Message Thorsten Ottosen 2002-07-22 11:56:54 Re: initdb on cygwin