Re: Help with authentication on Debain/Ubuntu installation

From: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
To: stan <stanb(at)panix(dot)com>, Magnus Hagander <magnus(at)hagander(dot)net>
Cc: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: Help with authentication on Debain/Ubuntu installation
Date: 2019-11-21 15:56:10
Message-ID: ccd6af85-ae12-6e8e-82bb-f8ed6a46dd59@aklaver.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 11/21/19 6:35 AM, stan wrote:
>

>> Thanks, found it, I believe:
>>
>> local all postgres
>>
>> Good to know first match wins, that is different than some other systems I
>> am used to.
>
> OK, there appears to be a bit more than I thought to this. Here is the line I
> believe is causing me issues:
>
> # Database administrative login by Unix domain socket
> local all postgres peer
>
> There is a comment saying that removing this is a bad idea, so ...
>
> If the 1st rule matches, I am thinking this will override any rule I put in
> after such as:
>
> local all postgres md5
>
> Is my understanding of this correct?

Yes.

The question is whether you really need a password connection to a local
socket or not?

If so then you will need to make the change and deal with any scripts
that are expecting a password free socket connection.

If not leave it alone. If you want to test password connection then use
a -h localhost to get a host connection.

>
>

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Marc Millas 2019-11-21 16:07:59 Re: Extract transactions from wals ??
Previous Message P V Tekawade 2019-11-21 15:53:21 ON COMMIT options for non temporary tables