RE: md5 and trust and pg_hba.conf

"Rossi, Maria" <[email protected]>
Newsgroups gmane.comp.db.postgresql.sql,gmane.comp.db.postgresql.novice
Message-ID <7974b8ff73cc4119804e0e8c8f900a26@DC03PXMBP003.jacksonnational.com>
Hi,

I think, I  got it .   Thanks for pointing me to the right direction.
Here’s the correct partial pg_hba.conf


host    all             psgdba           localhost           trust
host    all             psgdba           127.0.0.1/32        trust
host    all             psgdba             10.8.88.141/32    trust
host    all             psgdba           all                 md5
host    all             gd07           localhost             trust
host    all             gd07            127.0.0.1/32         trust
host    all             gd07             10.8.88.141/32      trust
host    all             gd07           all                 md5


This line below used to be there.   This is the IP of the server.  I deleted it and added a ‘trust’ line for psgdba and gd07

host    all             all             10.8.88.141/32          md5

Works now.   Thanks for  your help
Sorry for hesitating to post the entire pg_hba.conf.

Thanks again.

Maria








From: Sameer Kumar <[email protected]>
Sent: Monday, September 10, 2018 11:35 AM
To: Rossi, Maria <[email protected]>
Cc: [email protected]; [email protected]
Subject: Re: md5 and trust and pg_hba.conf

EXTERNAL EMAIL


On Mon, Sep 10, 2018 at 11:22 PM Rossi, Maria <[email protected]<mailto:[email protected]>> wrote:
Both have PGHOST set.   gd07 has a .pgpass, but psgdba does not.

What is it set to?

Can you post the rest of the pg_hba.conf?

 Does it still need a .pgpass even if it is already ‘trust’?

It should not.
Thanks.


From: Sameer Kumar <[email protected]<mailto:[email protected]>>
Sent: Monday, September 10, 2018 10:55 AM
To: Rossi, Maria <[email protected]<mailto:[email protected]>>
Cc: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]>
Subject: Re: md5 and trust and pg_hba.conf

EXTERNAL EMAIL

On Mon, Sep 10, 2018 at 10:46 PM Rossi, Maria <[email protected]<mailto:[email protected]>> wrote:
Hi,

Question on pg_hba.conf.  I have these entries:

host    all             psgdba           localhost           trust
host    all             psgdba           127.0.0.1/32<http://127.0.0.1/32>            trust
host    all             gd07           localhost                trust
host    all             gd07            127.0.0.1/32<http://127.0.0.1/32>           trust


Can you post the whole of pg_hba.conf file?

You might have some other entry that is taking precedence.


Command to logon to Postgres:
/usr/pgsql-9.3/bin/psql -d postgres

If you don't have PGHOST set then most likely you are not going over a tcp connection (which is what host entries in pg_hba are used for). Instead the local entries of pg_hba are taking effect.


If I am logged on ‘gd07’  at the server , it lets me log-on to Postgres without prompting for password

do you have a *.pgpass* file in the home directory?

If I am logged on as ‘psgdba’, it prompts for password.
As you can see, both have ‘trust’, but ‘gd07’ is the instance owner.

Why does ‘psgdba’ prompts?  What I am missing?
Your help would be much appreciated.

Thanks.
Maria

--

--

Best Regards,

Sameer Kumar | Senior Solution Architect

ASHNIK PTE. LTD.

36 Robinson Road, #14<https://maps.google.com/?q=36+Robinson+Road,+%2314&entry=gmail&source=g>-04 City House, Singapore 068877

T: +65 6438 3504<tel:6438%203504> | www.ashnik.com<http://www.ashnik.com/>

Skype: sameer.ashnik |   M: +65 8110 0350<tel:8110%200350>
[~WRD000.jpg]
--

--

Best Regards,

Sameer Kumar | Senior Solution Architect

ASHNIK PTE. LTD.

36 Robinson Road, #14-04 City House, Singapore 068877

T: +65 6438 3504 | www.ashnik.com<http://www.ashnik.com/>

Skype: sameer.ashnik |   M: +65 8110 0350

[https://www.ashnik.com/wp-content/uploads/2017/03/Final-Email-Signature.jpg]
image001.jpg (image/jpeg, 823 B) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.