Re: postgresql Secure Mode

From: Mario Soto Cordones - Venezuela <msotocl(at)gmail(dot)com>
To: alvherre(at)alvh(dot)no-ip(dot)org, Christopher Browne <cbbrowne(at)acm(dot)org>, pgsql-general(at)postgresql(dot)org
Subject: Re: postgresql Secure Mode
Date: 2005-08-08 14:24:54
Message-ID: e9b17cde050808072431104ecd@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin pgsql-general

Hello, what comments of PAM, was alone that, a comment, since try to
make it and I don't work.

now I detail them the carried out steps.
1.- make the digital certificate, and it places it in the directory
it data of postgresql.

openssl req -new -text -out server.req
openssl rsa -in privkey.pem -out server.key
rm privkey.pem
openssl req -x509 -in server.req -text -key server.key -out server.crt
chown postgres:postgres server.key && chmod og-rwx server.key

2.- configure postgresql.conf

ssl=true
password_encryption = true

3.- configure pg_hba.conf

hostssl all all 192.168.0.0 255.255.255.0 MD5

4.- service postgresql stop
5.- service postgresql start

but when I try to connect myself for example from an application EMS
postgresql manager by means of SSL, says that it cannot authenticate
in user

Thank, you very much

2005/8/8, Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>:
> On Mon, Aug 08, 2005 at 08:44:44AM -0400, Mario Soto Cordones - Venezuela wrote:
> > Hi ,
> > not in fact I don't have a password file, I wanted to use
> > autentificacion PAM, I have attempted it but I have not gotten it, on
> > the other hand I don't understand that of the passwords file.
>
> Can you post step-by-step instructions on how you set your system up?
> You hadn't mentioned PAM in your first report, and you didn't say what
> certificate you created and how. Also, you didn't show the relevant
> server log extract. Did you create a client certificate? Did you
> create the PAM user in Postgres?
>
> --
> Alvaro Herrera (<alvherre[a]alvh.no-ip.org>)
> "Entristecido, Wutra (canción de Las Barreras)
> echa a Freyr a rodar
> y a nosotros al mar"
>

--
cordialmente,

Ing. Mario Soto Cordones

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Alvaro Herrera 2005-08-08 14:38:51 Re: postgresql Secure Mode
Previous Message Alvaro Herrera 2005-08-08 13:56:40 Re: postgresql Secure Mode

Browse pgsql-general by date

  From Date Subject
Next Message Alvaro Herrera 2005-08-08 14:38:51 Re: postgresql Secure Mode
Previous Message Alvaro Herrera 2005-08-08 13:56:40 Re: postgresql Secure Mode