Re: ident authentication over tcp

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Zitat von Peter Koczan <pjkoczan@xxxxxxxxx>:

Hi all,

I'm having some trouble configuring ident authentication for TCP
connections. I can get it to work fine for local connections, but I
can't

Local connection:

$ psql postgres
...
postgres=>

Server Log:
Dec  9 11:06:59 mitchell postgres[27482]: [4-1] LOG:  connection
received: host=[local]
Dec  9 11:06:59 mitchell postgres[27482]: [5-1] LOG:  connection
authorized: user=koczan database=postgres
Dec  9 11:07:03 mitchell postgres[27482]: [6-1] LOG:  disconnection:
session time: 0:00:04.370 user=koczan database=postgres host=[local]

Remote connection to localhost:
$ psql -h localhost postgres
psql: FATAL:  no pg_hba.conf entry for host "127.0.0.1", user
"koczan", database "postgres", SSL off

Server log:
Dec  9 11:07:06 mitchell postgres[27494]: [4-1] LOG:  connection
received: host=localhost port=41434
Dec  9 11:07:06 mitchell postgres[27494]: [5-1] LOG:  could not
connect to Ident server at address "127.0.0.1", port 113: Connection
refused

This looks like you have no ident server running...

Dec  9 11:07:06 mitchell postgres[27494]: [6-1] FATAL:  Ident
authentication failed for user "koczan"
Dec  9 11:07:06 mitchell postgres[27495]: [4-1] LOG:  connection
received: host=localhost port=41435
Dec  9 11:07:06 mitchell postgres[27495]: [5-1] FATAL:  no pg_hba.conf
entry for host "127.0.0.1", user "koczan", database "postgres", SSL
off

My pg_hba.conf file looks like this:
# TYPE  DATABASE    USER        CIDR-ADDRESS	   METHOD

local   all         koczan      ident sameuser
hostssl all         koczan      127.0.0.1/32	   ident sameuser

I'm running Red Hat Enterprise 5.4, and I can't find any place where
an ident server is actually running on this host.

I guess you must install it first in recent distros, as there is not much use of ident anymore. So you have to search the packages for your OS.

Regards

Andreas

Attachment: smime.p7s
Description: S/MIME krytographische Unterschrift


[Index of Archives]     [KVM ARM]     [KVM ia64]     [KVM ppc]     [Virtualization Tools]     [Spice Development]     [Libvirt]     [Libvirt Users]     [Linux USB Devel]     [Linux Audio Users]     [Yosemite Questions]     [Linux Kernel]     [Linux SCSI]     [XFree86]

  Powered by Linux