[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: IMP3,horde2, Postgresql from sid



On Tue, 2002-05-28 at 13:48, Mike Egglestone wrote:
> Hi,
> I tried editing the pg_hba.conf file.
> There were only 3 unpounded lines.
> The first 2 pointed to localhost and the last one pointed to all hosts.
> but, the last line had reject, so I changed it to trust
> and I still couldn't get horde2 to configure postgres.

Not very secure.  It would be better to add a line, *before* the reject
line, to allow access to a specific host.  Again, "ident sameuser" is
more secure than "trust".

> I haven't tried the telnet  localhost 5432
> but I shouldn't I try this as well:   ?
> telnet hostname 5432
> 
> .. where hostname points to the real IP address of my server via /etc/hosts 

In the context of pg_hba.conf, hostname is the host whose client is
requesting service.  That telnet command would attempt to connect to a
server on that host, which is not what you want, though it will make a
connection.  However, telnet will always succeed in connecting, if there
is a postmaster running; the authorisation protocol happens after
connection and is not suited to manual execution.  If you can start psql
on the client, just do

    psql --host your_postgresql_server --dbname template1

which will test the TCP/IP connection and authorisation for you.  If the
client is the same machine, calling it by its name rather than localhost
will use the authorisation for the IP address corresponding to that name
rather than for 127.0.0.1.

If that does not show the error, please show me all the current
uncommented lines in pg_hba.conf.  You should also look in the horde's
postinst script (/var/lib/dpkg/info/horde.postinst, I suppose) to see
what it is trying to do.  Edit that script to add "set -x" at line 2,
which will display each line as it is executed.  This will show the
command that is failing.  Try to run that command by hand, turning on
any available verbosity or debugging.

-- 
Oliver Elphick                                Oliver.Elphick@lfix.co.uk
Isle of Wight                              http://www.lfix.co.uk/oliver
GPG: 1024D/3E1D0C1C: CA12 09E0 E8D5 8870 5839  932A 614D 4C34 3E1D 0C1C

     "Wait on the LORD; be of good courage, and he shall 
      strengthen thine heart; wait, I say, on the LORD."
                                    Psalms 27:14

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: