From: | Mario Soto Cordones - Venezuela <msotocl(at)gmail(dot)com> |
---|---|
To: | alvherre(at)alvh(dot)no-ip(dot)org, Christopher Browne <cbbrowne(at)acm(dot)org>, pgsql-general(at)postgresql(dot)org |
Subject: | Re: postgresql Secure Mode |
Date: | 2005-08-08 14:24:54 |
Message-ID: | e9b17cde050808072431104ecd@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin pgsql-general |
Hello, what comments of PAM, was alone that, a comment, since try to
make it and I don't work.
now I detail them the carried out steps.
1.- make the digital certificate, and it places it in the directory
it data of postgresql.
openssl req -new -text -out server.req
openssl rsa -in privkey.pem -out server.key
rm privkey.pem
openssl req -x509 -in server.req -text -key server.key -out server.crt
chown postgres:postgres server.key && chmod og-rwx server.key
2.- configure postgresql.conf
ssl=true
password_encryption = true
3.- configure pg_hba.conf
hostssl all all 192.168.0.0 255.255.255.0 MD5
4.- service postgresql stop
5.- service postgresql start
but when I try to connect myself for example from an application EMS
postgresql manager by means of SSL, says that it cannot authenticate
in user
Thank, you very much
2005/8/8, Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>:
> On Mon, Aug 08, 2005 at 08:44:44AM -0400, Mario Soto Cordones - Venezuela wrote:
> > Hi ,
> > not in fact I don't have a password file, I wanted to use
> > autentificacion PAM, I have attempted it but I have not gotten it, on
> > the other hand I don't understand that of the passwords file.
>
> Can you post step-by-step instructions on how you set your system up?
> You hadn't mentioned PAM in your first report, and you didn't say what
> certificate you created and how. Also, you didn't show the relevant
> server log extract. Did you create a client certificate? Did you
> create the PAM user in Postgres?
>
> --
> Alvaro Herrera (<alvherre[a]alvh.no-ip.org>)
> "Entristecido, Wutra (canción de Las Barreras)
> echa a Freyr a rodar
> y a nosotros al mar"
>
--
cordialmente,
Ing. Mario Soto Cordones
From | Date | Subject | |
---|---|---|---|
Next Message | Alvaro Herrera | 2005-08-08 14:38:51 | Re: postgresql Secure Mode |
Previous Message | Alvaro Herrera | 2005-08-08 13:56:40 | Re: postgresql Secure Mode |
From | Date | Subject | |
---|---|---|---|
Next Message | Alvaro Herrera | 2005-08-08 14:38:51 | Re: postgresql Secure Mode |
Previous Message | Alvaro Herrera | 2005-08-08 13:56:40 | Re: postgresql Secure Mode |