Tom Lane wrote:
Rob Cherry <postgresadmin@xxxxxxxx> writes:
Does anyone know if it is possible to overload auth types like this such
that if pam fails password would be tried?
No, it's not, as per the Fine Manual:
Provided that you don't care about the security and performance
implications of SSL vs non-SSL connectivity, wouldn't it be possible to
have something like:
hostnossl all all 0.0.0.0/0 krb5
hostssl all all 0.0.0.0/0 md5
... and then have sslmode set to prefer or allow on the client side?
Cheers,
Geoff
