0

I am struggling with the postgresql's access control file pg_hba.conf... it's never happy, and all I want to do is straight forward: A) Allow access to ALL from localhost B) Allow access to ALL from 10.8.0.* (VPN) C) Deny ALL remaining

I've read the wiki page on the pgsql's official website, but can't figure out what's wrong with my configuration; I connect to the VPN (which works nice) and then attempt to connect to pgsql using pgadmin => fails; I also try to install a simple punBB forum (on the same machine as the database server) and I get can't connect to database... It's all configuration issue...

Here's a sample of my current permissions:

host    all     all     10.8.0.0/24     md5
local   all         postgres                          ident
local   all         all                               ident
host    all         all         127.0.0.1/32          trust

Any ideas?

CoolStraw
  • 5,282
  • 8
  • 42
  • 64
  • What's your listen_addresses line in postgresql.conf say? – Scott Marlowe May 17 '11 at 12:30
  • Is that the IP of the postgresql server? Generally it's better to just leave it at * and make sure it's not commented. Then, after it's working you can experiment with making it more specific. – Scott Marlowe May 18 '11 at 22:43
  • FYI, it's best to cut and paste it. for instance, if the line is: #listen_addresses='10.8.0.1' then it's not gonna work because it's commented out, etc. – Scott Marlowe May 18 '11 at 23:00
  • Hello back. Thank you Scott, actually the issue was with the permissions, it's working now :) Thanks again – CoolStraw May 19 '11 at 07:00

1 Answers1

1

I have no idea which "wiki page on the pgsql's official website" have you read but the manual is quite nice and has examples:

# Allow any user on the local system to connect to any database with
# any database user name using Unix-domain sockets (the default for local
# connections).
#
# TYPE  DATABASE        USER            CIDR-ADDRESS            METHOD
local   all             all                                     trust

# The same using local loopback TCP/IP connections.
#
# TYPE  DATABASE        USER            CIDR-ADDRESS            METHOD
host    all             all             127.0.0.1/32            trust

# Allow any user from 10.8.0.0/24 to connect to all
# databases if the user's password is correctly supplied.
#
# TYPE  DATABASE        USER            CIDR-ADDRESS            METHOD
host    all             all             10.8.0.0/24             md5

And don't forget to reload the server after the changes.

Milen A. Radev
  • 60,241
  • 22
  • 105
  • 110
  • host all all 10.8.0.0/24 md5 this isn't working, php was unable to connect to pgsql... And I was talking about this wiki: http://wiki.postgresql.org/wiki/Client_Authentication – CoolStraw May 17 '11 at 12:02
  • Well, "isn't working" and "unable to connect" are not informative enough for me. Could you paste the error you see when you try to connect with your php app and also could you take a look in the Postges log for any authentication errors. – Milen A. Radev May 17 '11 at 15:40
  • Man that's crazy... I've just re-pasted the whole permissions and it worked.... Thank you very much – CoolStraw May 19 '11 at 07:00