Dmitry Alyabyev <dimitry(at)al(dot)org(dot)ua> writes:
> > If they're on a different host, and you're not willing to trust
> > ident, I think some kind of password auth is the only way to go.
>
> No, I'm talking about remove their access to some db's via pg_hba.conf
Well, in order to do that securely, you have to know who they are; this
requires identd, peer or password authentication.
-Doug
--
Let us cross over the river, and rest under the shade of the trees.
--T. J. Jackson, 1863