Advertisement
Guest User

Untitled

a guest
Sep 30th, 2014
193
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.04 KB | None | 0 0
  1.  
  2. (cakebet)deploy@precise64:/etc/postgresql/9.1/main$ sudo cat pg_hba.conf
  3. # PostgreSQL Client Authentication Configuration File
  4. # ===================================================
  5. #
  6. # Refer to the "Client Authentication" section in the PostgreSQL
  7. # documentation for a complete description of this file. A short
  8. # synopsis follows.
  9. #
  10. # This file controls: which hosts are allowed to connect, how clients
  11. # are authenticated, which PostgreSQL user names they can use, which
  12. # databases they can access. Records take one of these forms:
  13. #
  14. # local DATABASE USER METHOD [OPTIONS]
  15. # host DATABASE USER ADDRESS METHOD [OPTIONS]
  16. # hostssl DATABASE USER ADDRESS METHOD [OPTIONS]
  17. # hostnossl DATABASE USER ADDRESS METHOD [OPTIONS]
  18. #
  19. # (The uppercase items must be replaced by actual values.)
  20. #
  21. # The first field is the connection type: "local" is a Unix-domain
  22. # socket, "host" is either a plain or SSL-encrypted TCP/IP socket,
  23. # "hostssl" is an SSL-encrypted TCP/IP socket, and "hostnossl" is a
  24. # plain TCP/IP socket.
  25. #
  26. # DATABASE can be "all", "sameuser", "samerole", "replication", a
  27. # database name, or a comma-separated list thereof. The "all"
  28. # keyword does not match "replication". Access to replication
  29. # must be enabled in a separate record (see example below).
  30. #
  31. # USER can be "all", a user name, a group name prefixed with "+", or a
  32. # comma-separated list thereof. In both the DATABASE and USER fields
  33. # you can also write a file name prefixed with "@" to include names
  34. # from a separate file.
  35. #
  36. # ADDRESS specifies the set of hosts the record matches. It can be a
  37. # host name, or it is made up of an IP address and a CIDR mask that is
  38. # an integer (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that
  39. # specifies the number of significant bits in the mask. A host name
  40. # that starts with a dot (.) matches a suffix of the actual host name.
  41. # Alternatively, you can write an IP address and netmask in separate
  42. # columns to specify the set of hosts. Instead of a CIDR-address, you
  43. # can write "samehost" to match any of the server's own IP addresses,
  44. # or "samenet" to match any address in any subnet that the server is
  45. # directly connected to.
  46. #
  47. # METHOD can be "trust", "reject", "md5", "password", "gss", "sspi",
  48. # "krb5", "ident", "peer", "pam", "ldap", "radius" or "cert". Note that
  49. # "password" sends passwords in clear text; "md5" is preferred since
  50. # it sends encrypted passwords.
  51. #
  52. # OPTIONS are a set of options for the authentication in the format
  53. # NAME=VALUE. The available options depend on the different
  54. # authentication methods -- refer to the "Client Authentication"
  55. # section in the documentation for a list of which options are
  56. # available for which authentication methods.
  57. #
  58. # Database and user names containing spaces, commas, quotes and other
  59. # special characters must be quoted. Quoting one of the keywords
  60. # "all", "sameuser", "samerole" or "replication" makes the name lose
  61. # its special character, and just match a database or username with
  62. # that name.
  63. #
  64. # This file is read on server startup and when the postmaster receives
  65. # a SIGHUP signal. If you edit the file on a running system, you have
  66. # to SIGHUP the postmaster for the changes to take effect. You can
  67. # use "pg_ctl reload" to do that.
  68.  
  69. # Put your actual configuration here
  70. # ----------------------------------
  71. #
  72. # If you want to allow non-local connections, you need to add more
  73. # "host" records. In that case you will also need to make PostgreSQL
  74. # listen on a non-local interface via the listen_addresses
  75. # configuration parameter, or via the -i or -h command line switches.
  76.  
  77.  
  78.  
  79.  
  80. # DO NOT DISABLE!
  81. # If you change this first entry you will need to make sure that the
  82. # database superuser can access the database using some other method.
  83. # Noninteractive access to all databases is required during automatic
  84. # maintenance (custom daily cronjobs, replication, and similar tasks).
  85. #
  86. # Database administrative login by Unix domain socket
  87. local all postgres peer
  88.  
  89. # TYPE DATABASE USER ADDRESS METHOD
  90. local all cakebet md5
  91. # IPv4 local connections:
  92. host all all 127.0.0.1/32 md5
  93. host all all 192.168.33.0/24 md5
  94. host all cakebet 127.0.0.1/32 md5
  95. host all cakebet 192.168.0.0/16 md5
  96. host all cakebet 192.168.33.10/24 md5
  97. host all cakebet 192.168.33.1/32 md5
  98. # IPv6 local connections:
  99. #host all all ::1/128 md5
  100. # Allow replication connections from localhost, by a user with the
  101. # replication privilege.
  102. #local replication postgres peer
  103. #host replication postgres 127.0.0.1/32 md5
  104. #host replication postgres ::1/128 md5
  105.  
  106. host all all 192.68.33.0/24 trust
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement