Hi folks:
I just noticed that I can edit the main DSpace wiki but not the
Documentation wiki, so I figured I'd send a message here:
Here's the existing section (at least in DSDOC4x):
" In postgresql.conf: uncomment the line starting: listen_addresses =
'localhost'. Then tighten up security a bit by editing pg_hba.conf and
adding this line: host dspace dspace 127.0.0.1 255.255.255.255 md5"
Proposed changes:
1) It might be worth mentioning that Postgresql listens to 'localhost' by
default and that it's probably not necessary to uncomment that
listen_addresses line. That said, it wouldn't hurt anything, so it doesn't
really matter to me.
2) In regards to pg_hba.conf, it should be mentioned that the line "host
dspace dspace 127.0.0.1 255.255.255.255 md5" should be added "above" any
host connections that refer to "all" databases.
As per the Postgresql docs, "The first record with a matching connection
type, client address, requested database, and user name is used to perform
authentication."
(http://www.postgresql.org/docs/9.1/static/auth-pg-hba-conf.html)
If the dspace-specific connection is specified lower in the .conf file,
it'll be ignored and you'll potentially get a peer connection error (if your
OS user is different from your database user).
I've seen online tutorials that tell people to change the default local and
host connections (for localhost) as trust, but that's really not necessary.
In theory, it could also be dangerous as it allows any local user to access
Postgresql as any user they want.
Anyway, that's my 2 cents.
-David
------------------------------------------------------------------------------
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today.
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
