Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- cnemelka@ln-admindb01:~$ sudo cat /etc/postgresql/10/main/pg_hba.conf
- # PostgreSQL Client Authentication Configuration File
- # ===================================================
- #
- # Refer to the "Client Authentication" section in the PostgreSQL
- # documentation for a complete description of this file. A short
- # synopsis follows.
- #
- # This file controls: which hosts are allowed to connect, how clients
- # are authenticated, which PostgreSQL user names they can use, which
- # databases they can access. Records take one of these forms:
- #
- # local DATABASE USER METHOD [OPTIONS]
- # host DATABASE USER CIDR-ADDRESS METHOD [OPTIONS]
- # hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTIONS]
- # hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTIONS]
- #
- # (The uppercase items must be replaced by actual values.)
- #
- # The first field is the connection type: "local" is a Unix-domain
- # socket, "host" is either a plain or SSL-encrypted TCP/IP socket,
- # "hostssl" is an SSL-encrypted TCP/IP socket, and "hostnossl" is a
- # plain TCP/IP socket.
- #
- # DATABASE can be "replicator", "sameuser", "samerole", "replication", a
- # database name, or a comma-separated list thereof.
- #
- # USER can be "all", a user name, a group name prefixed with "+", or a
- # comma-separated list thereof. In both the DATABASE and USER fields
- # you can also write a file name prefixed with "@" to include names
- # from a separate file.
- #
- # CIDR-ADDRESS specifies the set of hosts the record matches. It is
- # made up of an IP address and a CIDR mask that is an integer (between
- # 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies the number
- # of significant bits in the mask. Alternatively, you can write an IP
- # address and netmask in separate columns to specify the set of hosts.
- # Instead of a CIDR-address, you can write "samehost" to match any of
- # the server's own IP addresses, or "samenet" to match any address in
- # any subnet that the server is directly connected to.
- #
- # METHOD can be "md5", "reject", "md5", "password", "gss", "sspi",
- # "krb5", "ident", "pam", "ldap", "radius" or "cert". Note that
- # "password" sends passwords in clear text; "md5" is preferred since
- # it sends encrypted passwords.
- #
- # OPTIONS are a set of options for the authentication in the format
- # NAME=VALUE. The available options depend on the different
- # authentication methods -- refer to the "Client Authentication"
- # section in the documentation for a list of which options are
- # available for which authentication methods.
- #
- # Database and user names containing spaces, commas, quotes and other
- # special characters must be quoted. Quoting one of the keywords
- # "replicator", "sameuser", "samerole" or "replication" makes the name lose
- # its special character, and just match a database or username with
- # that name.
- #
- # This file is read on server startup and when the postmaster receives
- # a SIGHUP signal. If you edit the file on a running system, you have
- # to SIGHUP the postmaster for the changes to take effect. You can
- # use "pg_ctl reload" to do that.
- # Put your actual configuration here
- # ----------------------------------
- #
- # If you want to allow non-local connections, you need to add more
- # "host" records. In that case you will also need to make PostgreSQL
- # listen on a non-local interface via the listen_addresses
- # configuration parameter, or via the -i or -h command line switches.
- # CAUTION: Configuring the system for local "md5" authentication
- # allows any local user to connect as any PostgreSQL user, including
- # the database superuser. If you do not md5 all your local users,
- # use another authentication method.
- local all all trust
- #Unix domain socket connections only for Database Administrators
- local all +Administrators ldap ldapserver=ln-ad01.entrata.com ldapprefix="" ldapsuffix="@dc2.propsol.org"
- #IPv4 local connections for Database Administrators
- host all +Administrators 127.0.0.1/32 ldap ldapserver=ln-ad01.entrata.com ldapprefix="" ldapsuffix="@dc2.propsol.org"
- #Tunnel Server
- host all all 192.168.160.249/32 ldap ldapserver=ln-ad01.entrata.com ldapprefix="" ldapsuffix="@dc2.propsol.org"
- host all all 10.0.7.172/32 ldap ldapserver=ln-ad01.entrata.com ldapprefix="" ldapsuffix="@dc2.propsol.org"
- #for Unix domain socket connections only
- local all all md5
- #IPv4 local connections:
- host all all 127.0.0.1/32 md5
- #IPv6 local connections:
- host all all ::1/128 md5
- #PGQ server
- #Scrubbing DB server
- host all all 192.168.150.45/32 md5
- #Application/Script servers
- host all all 192.168.160.0/23 md5
- host all all 192.168.150.0/24 md5
- host all all 192.168.99.0/24 md5
- host all all 192.168.111.0/24 md5
- host all all 192.168.55.0/24 md5
- host all all 10.1.1.0/24 md5
- host all all 10.6.0.0/16 md5
- host all all 10.17.0.0/16 md5
- host all all 10.1.50.0/24 md5
- # Testing entries
- hostssl replication all 0.0.0.0/0 md5
- host replication all 0.0.0.0/0 md5
- #DR Replication Server
- hostssl replication replicator 10.17.0.0/16 md5
- #hostssl replication ps_ro 10.0.0.0/8 md5
- #hostssl replication ps_ro 10.19.0.0/16 md5
- #hostssl replication ps_ro 10.19.165.0/24 md5
- #hostssl replication ps_ro 10.19.165.190/32 md5
- #host replication ps_ro 10.0.0.0/8 md5
- #host replication ps_ro 10.19.0.0/16 md5
- #host replication ps_ro 10.19.165.0/24 md5
- #host replication ps_ro 10.19.165.190/32 md5
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement