logo       
Google Custom Search
    AddThis Social Bookmark Button
-->

Re: Re Dynamic IP - pg_hba: msg#00217

Subject: Re: Re Dynamic IP - pg_hba
Dirk,

> Well figured out the answer to my own question. Pattern is simply a mask of
> 0s like this for the internal network:
> 
> host all 0.0.0.0 0.0.0.0 trust

This opens your database to the Universe, including the internet.   You sure 
you want to do this?  If so, give me your ip address, I could use some extra 
database testing space <grin>

I think you want something more like this:

host all 10.1.0.0 255.255.0.0 trust

... assuming that your DHCP range is 10.1.x.x.   You'll need to ask your 
network administrator for the right numbers to cover your internal network.

Also, "trust" means that any user on your network does not need a password to 
log in, a really insecure situation.  Depending on what your client supports, 
you want (in descending order of security):

host all 10.1.0.0 255.255.0.0 md5
host all 10.1.0.0 255.255.0.0 crypt
host all 10.1.0.0 255.255.0.0 password


-- 
-Josh Berkus
 Aglio Database Solutions
 San Francisco


---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster



<Prev in Thread] Current Thread [Next in Thread>