Обсуждение: pg_hba.conf

Поиск
Список
Период
Сортировка

pg_hba.conf

От
Angelos Karageorgiou
Дата:

I have been using postgres for about 4 months now, and I have to admit
it is an awesome product , congrats to you all people but I do have a 
lingering question

<pest mode>
in pg_hba.conf when my netmask is 255.255.255.0 like below the authentication
mechanism works fine

host    databank        x.y.z.12   255.255.255.0   ident sameuser 


but if I change my netmask to 255.255.255.255 like below it does not work
any more. Am I doing something wrong or did I not understand thing correctly ?
I think it would be better security-wise to have 255.255.255.255 netmasks for
individual hosts. 
host    databank        x.y.z.12   255.255.255.255   ident sameuser 
</pest mode>

BTW I am working in Greece and postgres with the Greek locale on BSDI3.1 works
fabulously ! Again congrats to the people who plugged in the locale code.


--
Incredible Networks LTD       Angelos Karageorgiou
20 Karea st,                  +30.1.92.12.312 (voice)
116 36 Athens, Greece.        +30.1.92.12.314 (fax)
http://www.incredible.com     angelos@incredible.com (e-mail)



Re: [HACKERS] pg_hba.conf

От
Tom Lane
Дата:
Angelos Karageorgiou <angelos@incredible.com> writes:
> in pg_hba.conf when my netmask is 255.255.255.0 like below the authentication
> mechanism works fine
> host    databank        x.y.z.12   255.255.255.0   ident sameuser 
> but if I change my netmask to 255.255.255.255 like below it does not work
> any more. Am I doing something wrong or did I not understand thing correctly?
> host    databank        x.y.z.12   255.255.255.255   ident sameuser 

I use 255.255.255.255 netmask and it works as expected for me...
do you still see this problem now that you have fixed your libc and
database setup problems?

Also, what do you mean by "it does not work"?  Does it fail to let in
new connections from the intended host, or improperly let in connections
from other hosts?
        regards, tom lane

PS: I assume you've double-checked that the intended host really is
x.y.z.12, and not x.y.z.something-else...