be careful with order change. This proposed by Scott was correct; yours will reject all the connections made by user system to xpto. Documentation says: > The first record with a matching connection type, client address, > requested database, and user name is used to perform authentication. There > is no "fall-through" or "backup": if one record is chosen and the > authentication fails, subsequent records are not considered. -- Sent from: http://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html -- Sent via pgsql-admin mailing list (pgsql-admin@xxxxxxxxxxxxxx) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin