[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Best practice for allowing access to a postgres db



Hi!

sean finney [2005-09-27  4:22 -0400]:
> what i meant was that when one calls pg_test_hba, one should be able to
> pass the exact connection method/params.  here are some examples:

Right, makes sense.

> pg_test_hba --add --method ident dbname dbuser
> pg_test_hba --add --ip w.x.y.z --method ident dbname dbuser
> pg_test_hba --add --method md5 dbname dbuser
> pg_test_hba --add --ip w.x.y.z --method md5 dbname dbuser
> pg_test_hba --remove ...

What is the purpose of --add/--remove?

> and i suppose --ip would default to 127.0.0.1 if it needed to be used
> in making calculations.

My initial spec proposed that if --ip is not given, it defaults to
lcoal Unix socket authentication. This should be consistent with
pg_add_hba. What do you think?

Martin

-- 
Martin Pitt              http://www.piware.de
Ubuntu Developer   http://www.ubuntulinux.org
Debian Developer        http://www.debian.org

Attachment: signature.asc
Description: Digital signature


Reply to: