Re: Enable user access from remote host

From: John R Pierce <pierce(at)hogranch(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Piotre Ugrumov <afmulone(at)gmail(dot)com>, pgsql-general(at)postgresql(dot)org
Subject: Re: Enable user access from remote host
Date: 2009-03-08 23:49:58
Message-ID: 49B459A6.2020407@hogranch.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Tom Lane wrote:
> John R Pierce <pierce(at)hogranch(dot)com> writes:
>
>> *HOWEVER* "ident sameuser" should *not* be used for HOST connections,
>> its only reliable for LOCAL connections.
>>
>
> A more accurate statement is that it's trustworthy to the extent that
> you trust the owner of the other machine to be running a non-broken
> identd daemon. Within a LAN it might be perfectly reasonable to use.
>

you would have to extend that trust to any machine connected to any
network which can be routed to the server in question as he was
specifying a wildcard IP, and that includes anything that anyone could
plug into any network port.

no thanks.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Chris 2009-03-09 01:12:26 Re: Log SQL code before executing it
Previous Message Carl Sopchak 2009-03-08 23:40:52 Re: Newbie questions relating to transactions