Search Postgresql Archives

Re: Force ssl connection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Jul 9, 2013 at 10:02 AM, Muhammad Bashir Al-Noimi
<mbnoimi@xxxxxxxxx> wrote:
>
> So may you please be more specific, what's wrong in my configurations?
>
> My pg_hba.conf content is:
>
> local   all             postgres                                peer
> local   all             all                                     peer
> host    all             all             127.0.0.1/32            md5
> host    all             all             ::1/128                 md5
> host    all     all     0.0.0.0/0       md5
> hostssl all     all     0.0.0.0/0       md5
> hostnossl        all     all     0.0.0.0/0       reject

The line below accepts all connections, whether ssl or nossl:

host    all     all     0.0.0.0/0       md5

It takes precedence over the reject line, as it occurs in the file
before the reject.

If you remove that line, then you don't need the reject line at all.

AFAICT, having a reject as the last line in the file is useless.
Anything that has reached that point is going to be rejected anyway.

Cheers,

Jeff


-- 
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux