Re: [ADMIN] pg_hba changes not honored

2006-08-27 Thread Sriram Dandapani
@postgresql.org Subject: Re: [ADMIN] pg_hba changes not honored   On 8/23/06, Tom Lane <[EMAIL PROTECTED]> wrote: "Sriram Dandapani" <[EMAIL PROTECTED]> writes: > Pg_ctl is pointing to the same directory that postmaster points to on > startup. There is only 1 data director

Re: [ADMIN] pg_hba changes not honored

2006-08-27 Thread Aaron Bono
On 8/23/06, Tom Lane <[EMAIL PROTECTED]> wrote: "Sriram Dandapani" <[EMAIL PROTECTED]> writes:> Pg_ctl is pointing to the same directory that postmaster points to on> startup. There is only 1 data directory/postgres installation that I > use.> Pg_ctl informs that postmaster is signaled. When I see

Re: [ADMIN] pg_hba changes not honored

2006-08-23 Thread Tom Lane
"Sriram Dandapani" <[EMAIL PROTECTED]> writes: > Pg_ctl is pointing to the same directory that postmaster points to on > startup. There is only 1 data directory/postgres installation that I > use. > Pg_ctl informs that postmaster is signaled. When I see the logs for > postmaster, it says "received

Re: [ADMIN] pg_hba changes not honored

2006-08-23 Thread Sriram Dandapani
2.4.21-40.ELsmp #1 SMP Thu Feb 2 22:22:39 EST 2006 i686 i686 i386 GNU/Linux Postgres 8.1.2 -Original Message- From: Tom Lane [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 23, 2006 4:00 PM To: Sriram Dandapani Cc: Joshua D. Drake; pgsql-admin@postgresql.org Subject: Re: [ADMIN] pg_h

Re: [ADMIN] pg_hba changes not honored

2006-08-23 Thread Tom Lane
"Sriram Dandapani" <[EMAIL PROTECTED]> writes: > This problem occurs only when the changes are made while postmaster is > running and pg_ctl is used to reload config files. > When the changes are applied and postmaster is stopped and restarted, it > works fine. Hm. OK, that means we need to look

Re: [ADMIN] pg_hba changes not honored

2006-08-23 Thread Sriram Dandapani
: Wednesday, August 23, 2006 3:44 PM To: Tom Lane Cc: Sriram Dandapani; pgsql-admin@postgresql.org Subject: Re: [ADMIN] pg_hba changes not honored Tom Lane wrote: > "Sriram Dandapani" <[EMAIL PROTECTED]> writes: >> When I update pg_hba.conf to disallow certain client machines fr

Re: [ADMIN] pg_hba changes not honored

2006-08-23 Thread Joshua D. Drake
Tom Lane wrote: "Sriram Dandapani" <[EMAIL PROTECTED]> writes: When I update pg_hba.conf to disallow certain client machines from connectiong (update pg_hba.conf, pg_ctl reload), I still see new connections appearing in the process list from the clients I want to disconnect. Sounds to me like

Re: [ADMIN] pg_hba changes not honored

2006-08-23 Thread Tom Lane
"Sriram Dandapani" <[EMAIL PROTECTED]> writes: > This is the complete pg_hba contents > local all all trust > # IPv4 local connections: > hostall all 127.0.0.1/32 trust > #host all all 172.31.0.84/24trust

Re: [ADMIN] pg_hba changes not honored

2006-08-23 Thread Sriram Dandapani
. -Original Message- From: Tom Lane [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 23, 2006 3:11 PM To: Sriram Dandapani Cc: pgsql-admin@postgresql.org Subject: Re: [ADMIN] pg_hba changes not honored "Sriram Dandapani" <[EMAIL PROTECTED]> writes: > When I update pg_h

Re: [ADMIN] pg_hba changes not honored

2006-08-23 Thread Tom Lane
"Sriram Dandapani" <[EMAIL PROTECTED]> writes: > When I update pg_hba.conf to disallow certain client machines from > connectiong (update pg_hba.conf, pg_ctl reload), I still see new > connections appearing in the process list from the clients I want to > disconnect. Sounds to me like a mistake in

[ADMIN] pg_hba changes not honored

2006-08-23 Thread Sriram Dandapani
When I update pg_hba.conf to disallow certain client machines from connectiong (update pg_hba.conf, pg_ctl reload), I still see new connections appearing in the process list from the clients I want to disconnect. Why does this happen. (I noticed this behavior with jdbc connections in jboss

Re: [ADMIN] pg_hba and *

2004-12-16 Thread Bruno Wolff III
On Thu, Dec 16, 2004 at 10:52:31 -0500, FM <[EMAIL PROTECTED]> wrote: > Hello, > We have kerberos auth for all humain users, but I still need md5 auth > for scripts users. > > All my scripts user name start with soft_ > > Can I add soft_* in the pg_hba ? You can't do pattern matching there.

[ADMIN] pg_hba and *

2004-12-16 Thread FM
Hello, We have kerberos auth for all humain users, but I still need md5 auth for scripts users. All my scripts user name start with soft_ Can I add soft_* in the pg_hba ? thanks ---(end of broadcast)--- TIP 9: the planner will ignore your desire to

Re: [ADMIN] pg_hba, access control for a webserver, superuser, and joe user

2003-01-29 Thread Bruno Wolff III
On Tue, Jan 28, 2003 at 15:39:03 -0800, Jerry Asher <[EMAIL PROTECTED]> wrote: > > Does the order of statements in pg_hba.conf matter? > Is there a priority and a fallback of sorts? Try this first mechanism > and if that fails, try the next mechanism? Yes the order matters. Only the first rule

[ADMIN] pg_hba, access control for a webserver, superuser, and joe user

2003-01-28 Thread Jerry Asher
I am running a system with three types of users: A) Joe User, who may have a pg database I don't care if Joe User, once logged in to the system has to type a password or not to get access to his db local sameuser md5 or local all ident sameuser

Re: [ADMIN] pg_hba

2002-12-31 Thread David F. Skoll
On Tue, 31 Dec 2002, Rob Abernethy IV wrote: > Is there any problem with this line from my pg_hba.conf file: > # TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD > local all all 0.0.0.0 0.0.0.0 md5 A type of "local" doesn't take IP-ADDRES or IP-MASK. It's a UNIX-domain socket,

Re: [ADMIN] pg_hba

2002-12-31 Thread Justin Georgeson
Try leaving the IP fields blank, local uses a unix domain socket. Rob Abernethy IV wrote: Is there any problem with this line from my pg_hba.conf file: # TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD local all all 0.0.0.0 0.0.0.0 md5 I get this error when I try to connect:

[ADMIN] pg_hba

2002-12-31 Thread Rob Abernethy IV
Is there any problem with this line from my pg_hba.conf file: # TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD local all all 0.0.0.0 0.0.0.0 md5 I get this error when I try to connect: LOG: parse_hba: invalid syntax in pg_hba.conf file at line 90, token "0.0.0.0" FATAL: Mis