Tom Lane wrote:
If your pg_hba.conf looks like host all all 0.0.0.0/32 md5 there's not much call to update it dynamically ...
There'll be a call to update it once - to 0.0.0.0/0 ;-) I guess you proved the point about how easy it is the get wrong ;-) (sorry, couldn't resist) But it's not clear to me why a CONNECT right shouldn't encompass all the things that hba does, i.e. connect method, source address and auth method. cheers andrew ---------------------------(end of broadcast)--------------------------- TIP 6: explain analyze is your friend