User authentication blues

Your pg_hba.conf listing does not include a password FILE - the format
is:

host allowedDB's IPaddys mask AUTHTYPE PASSWORDFILE
(such as (such as
"password", "mypasswords")
"trust", etc)
--
When I was seven years old, I was once reprimanded by my mother for an
act of collective brutality in which I had been involved at school. A
group of seven-year-olds had been teasing and tormenting a
six-year-old. "It is always so," my mother said. "You do things
together which not one of you would think of doing alone." ...
Wherever one looks in the world of human organization, collective
responsibility brings a lowering of moral standards. The military
establishment is an extreme case, an organization which seems to have
been expressly designed to make it possible for people to do things
together which nobody in his right mind would do alone.
-- Freeman Dyson, "Weapons and Hope"

Jeffrey Napolitano
Lowly Intern
Software Emancipation Technology

Maarten Boekhold wrote:

On Thu, 30 Jul 1998, Jeffrey Napolitano wrote:

Your pg_hba.conf listing does not include a password FILE - the format
is:

host allowedDB's IPaddys mask AUTHTYPE PASSWORDFILE
(such as (such as
"password", "mypasswords")
"trust", etc)

AFAIK in the newer versions of PostgreSQL (6.3.2) this is not needed
anymore because the password is stored in a system table (pg_shadow, only
readable by the postgres superuser).

Maarten

_____________________________________________________________________________
| TU Delft, The Netherlands, Faculty of Information Technology and Systems |
| Department of Electrical Engineering |
| Computer Architecture and Digital Technique section |
| M.Boekhold@et.tudelft.nl |
-----------------------------------------------------------------------------

On Thu, 30 Jul 1998, Maarten Boekhold wrote:

Hi,

I have a 6.3.2 server, and I want to use password authentication.
So, I gave the user 'postgres' and some other user a password, and I put this
in my pg_hba.conf:

host all 127.0.0.1 255.255.255.255 password
host all 206.31.72.11 255.255.255.255 password

But I cannot connect this way using a password (psql -u). I can connect
if I set everything to 'trust', but in that case I can even fool
posttresql in thinking I'm user postgres while I'm logged on as the other
user by using password authentication and using 'postgres' as username
while supplying a fake password.

I've figured out that if I use authtype 'crypt' in pg_hba.conf I can
connect to a database. I don't have to specify 'authtype=crypt' in my
perl-script, 'authtype=passwd' works just fine. Only, I cannot use this
to connect from older clients (ie. a 6.2 system). Too bad.....

Maarten

_____________________________________________________________________________
| TU Delft, The Netherlands, Faculty of Information Technology and Systems |
| Department of Electrical Engineering |
| Computer Architecture and Digital Technique section |
| M.Boekhold@et.tudelft.nl |
-----------------------------------------------------------------------------