Re: pg_hba.conf: 'trust' vs. 'md5' Issues

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Jeff-

Thanks so much for the reply.

Yes, I have ssl=true in postgresql.conf. (password encryption is commented out - is that OK?: #password_encryption = true)

Also, yes, server.crt is in the 'data' directory of my postgres server, as is server.key.

And, yes, when I am able to start Postgres (when using 'trust' in the pg_hba.conf file vs. 'md5'), I do so the 'SSL connection' line:

   C:\msys\1.0\local\pgsql\bin>psql -d apt -U postgres
   Welcome to psql 8.0.8, the PostgreSQL interactive terminal.

   Type:  \copyright for distribution terms
          \h for help with SQL commands
          \? for help with psql commands
          \g or terminate with semicolon to execute query
          \q to quit

   SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)

   Warning: Console code page (437) differs from Windows code page (1252)
            8-bit characters may not work correctly. See psql reference
            page "Notes for Windows users" for details.

   apt=#

It's only when I change the connection method to 'md5' that I'm running into problems -- then I cannot connect from pgadmin or the command line.

Thanks,
-Jeanna

----- Original Message ----- From: "Jeff Frost" <jeff@xxxxxxxxxxxxxxxxxxxxxx>
To: "Jeanna Geier" <jgeier@xxxxxxxxxxxx>
Cc: <pgsql-admin@xxxxxxxxxxxxxx>
Sent: Tuesday, September 26, 2006 10:05 AM
Subject: Re: [ADMIN] pg_hba.conf: 'trust' vs. 'md5' Issues


On Tue, 26 Sep 2006, Jeff Frost wrote:

It seems that for some reason either your server or your client are not trying to use SSL. Note the: "SSL off" in the error message you received. Do you have a server.crt in the data directory of the postgres server?


I guess I should have also asked if you have the

ssl = true

in postgresql.conf?

---
Jeff Frost, Owner       <jeff@xxxxxxxxxxxxxxxxxxxxxx>
Frost Consulting, LLC   http://www.frostconsultingllc.com/
Phone: 650-780-7908     FAX: 650-649-1954


---------------------------(end of broadcast)---------------------------
TIP 2: Don't 'kill -9' the postmaster




[Index of Archives]     [KVM ARM]     [KVM ia64]     [KVM ppc]     [Virtualization Tools]     [Spice Development]     [Libvirt]     [Libvirt Users]     [Linux USB Devel]     [Linux Audio Users]     [Yosemite Questions]     [Linux Kernel]     [Linux SCSI]     [XFree86]

  Powered by Linux