BUG #4450: Postgres do not ask for passord

Started by Caduover 17 years ago5 messagesbugs
Jump to latest
#1Cadu
cadup@ig.com.br

The following bug has been logged online:

Bug reference: 4450
Logged by: Carlos
Email address: cadup@ig.com.br
PostgreSQL version: 8.2
Operating system: linux
Description: Postgres do not ask for passord
Details:

I have one user that is a superuser. The pg_hba.conf is set to use md5
specific to this user. When I connect the postgresql do not ask for the
password. If I change the pg_hba.con to reject, it works. Do you know what
is the problem?

#2tomas@tuxteam.de
tomas@tuxteam.de
In reply to: Cadu (#1)
Re: BUG #4450: Postgres do not ask for passord

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Oct 05, 2008 at 02:42:31PM +0000, Carlos wrote:

The following bug has been logged online:

Bug reference: 4450
Logged by: Carlos
Email address: cadup@ig.com.br
PostgreSQL version: 8.2
Operating system: linux
Description: Postgres do not ask for passord
Details:

I have one user that is a superuser. The pg_hba.conf is set to use md5
specific to this user. When I connect the postgresql do not ask for the
password. If I change the pg_hba.con to reject, it works. Do you know what
is the problem?

Maybe you still have an entry like

local all all trust

somewhere in pg_hba.conf?

Regards
- -- tomás
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFI6O0kBcgs9XrR2kYRAnYHAJ40uG8aDUGazJInKvscyuIlgDDEDACfcr1Q
SFXPA0Q4JW8Y04HRsstiYOc=
=lIC2
-----END PGP SIGNATURE-----

#3Gurjeet Singh
singh.gurjeet@gmail.com
In reply to: tomas@tuxteam.de (#2)
Re: BUG #4450: Postgres do not ask for passord

On Sun, Oct 5, 2008 at 10:06 PM, <tomas@tuxteam.de> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Oct 05, 2008 at 02:42:31PM +0000, Carlos wrote:

The following bug has been logged online:

Bug reference: 4450
Logged by: Carlos
Email address: cadup@ig.com.br
PostgreSQL version: 8.2
Operating system: linux
Description: Postgres do not ask for passord
Details:

I have one user that is a superuser. The pg_hba.conf is set to use md5
specific to this user. When I connect the postgresql do not ask for the
password. If I change the pg_hba.con to reject, it works. Do you know

what

is the problem?

Maybe you still have an entry like

local all all trust

somewhere in pg_hba.conf?

Posting both your versions of pg_hba.conf would help. (Strip out the
commented lines).

Best regards,
--
gurjeet[.singh]@EnterpriseDB.com
singh.gurjeet@{ gmail | hotmail | indiatimes | yahoo }.com

EnterpriseDB http://www.enterprisedb.com

Mail sent from my BlackLaptop device

#4Cadu
cadup@ig.com.br
In reply to: Gurjeet Singh (#3)
RES: BUG #4450: Postgres do not ask for passord

This is my pg_hba.conf:

# TYPE DATABASE USER CIDR-ADDRESS METHOD

host all postgres 0.0.0.0/0 reject

local bancoX userX trust

local all all md5

host all all 127.0.0.1/32 md5

host all userY 0.0.0.0/0 md5

host bancoX all 0.0.0.0/0 md5

host all all 0.0.0.0/0 reject

If I try a remote Access using psql or pgadmin and the user is userY it
Access and do not ask for password.

If I use other user it ask for password.

If I change the pg_hba.conf to

# TYPE DATABASE USER CIDR-ADDRESS METHOD

host all postgres 0.0.0.0/0 reject

local bancoX userX trust

local all all md5

host all all 127.0.0.1/32 md5

host all userY 0.0.0.0/0 reject

host bancoX all 0.0.0.0/0 md5

host all all 0.0.0.0/0 reject

It reject correctly my Access.

I realy think this is a bug.

I tryed drop and recreate the user and continue the same.

Tanks for help,

Carlos

De: Gurjeet Singh [mailto:singh.gurjeet@gmail.com]
Enviada em: domingo, 5 de outubro de 2008 19:59
Para: tomas@tuxteam.de
Cc: Carlos; pgsql-bugs@postgresql.org
Assunto: Re: [BUGS] BUG #4450: Postgres do not ask for passord

On Sun, Oct 5, 2008 at 10:06 PM, <tomas@tuxteam.de> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Oct 05, 2008 at 02:42:31PM +0000, Carlos wrote:

The following bug has been logged online:

Bug reference: 4450
Logged by: Carlos
Email address: cadup@ig.com.br
PostgreSQL version: 8.2
Operating system: linux
Description: Postgres do not ask for passord
Details:

I have one user that is a superuser. The pg_hba.conf is set to use md5
specific to this user. When I connect the postgresql do not ask for the
password. If I change the pg_hba.con to reject, it works. Do you know what
is the problem?

Maybe you still have an entry like

local all all trust

somewhere in pg_hba.conf?

Posting both your versions of pg_hba.conf would help. (Strip out the
commented lines).

Best regards,

--
gurjeet[.singh]@EnterpriseDB.com
singh.gurjeet@{ gmail | hotmail | indiatimes | yahoo }.com

EnterpriseDB http://www.enterprisedb.com

Mail sent from my BlackLaptop device

#5Tom Lane
tgl@sss.pgh.pa.us
In reply to: Cadu (#4)
Re: RES: BUG #4450: Postgres do not ask for passord

"Cadu" <cadup@ig.com.br> writes:

If I try a remote Access using psql or pgadmin and the user is userY it
Access and do not ask for password.
If I use other user it ask for password.

Hmm, there's nothing in your pg_hba.conf to explain that. I think maybe
you have a ~/.pgpass file (I forget how it's spelled on Windows) that is
silently supplying userY's password on the client side.

regards, tom lane