pg_hba.conf

Started by Angelos Karageorgiouabout 27 years ago2 messages
#1Angelos Karageorgiou
angelos@incredible.com

I have been using postgres for about 4 months now, and I have to admit
it is an awesome product , congrats to you all people but I do have a
lingering question

<pest mode>
in pg_hba.conf when my netmask is 255.255.255.0 like below the authentication
mechanism works fine

host databank x.y.z.12 255.255.255.0 ident sameuser

but if I change my netmask to 255.255.255.255 like below it does not work
any more. Am I doing something wrong or did I not understand thing correctly ?
I think it would be better security-wise to have 255.255.255.255 netmasks for
individual hosts.
host databank x.y.z.12 255.255.255.255 ident sameuser
</pest mode>

BTW I am working in Greece and postgres with the Greek locale on BSDI3.1 works
fabulously ! Again congrats to the people who plugged in the locale code.

--
Incredible Networks LTD Angelos Karageorgiou
20 Karea st, +30.1.92.12.312 (voice)
116 36 Athens, Greece. +30.1.92.12.314 (fax)
http://www.incredible.com angelos@incredible.com (e-mail)

#2Tom Lane
tgl@sss.pgh.pa.us
In reply to: Angelos Karageorgiou (#1)
Re: [HACKERS] pg_hba.conf

Angelos Karageorgiou <angelos@incredible.com> writes:

in pg_hba.conf when my netmask is 255.255.255.0 like below the authentication
mechanism works fine
host databank x.y.z.12 255.255.255.0 ident sameuser
but if I change my netmask to 255.255.255.255 like below it does not work
any more. Am I doing something wrong or did I not understand thing correctly?
host databank x.y.z.12 255.255.255.255 ident sameuser

I use 255.255.255.255 netmask and it works as expected for me...
do you still see this problem now that you have fixed your libc and
database setup problems?

Also, what do you mean by "it does not work"? Does it fail to let in
new connections from the intended host, or improperly let in connections
from other hosts?

regards, tom lane

PS: I assume you've double-checked that the intended host really is
x.y.z.12, and not x.y.z.something-else...