On 11/21/19 6:35 AM, stan wrote:
Thanks, found it, I believe:
local all postgres
Good to know first match wins, that is different than some other systems I
am used to.
OK, there appears to be a bit more than I thought to this. Here is the line I
believe is causing me issues:
# Database administrative login by Unix domain socket
local all postgres peer
There is a comment saying that removing this is a bad idea, so ...
If the 1st rule matches, I am thinking this will override any rule I put in
after such as:
local all postgres md5
Is my understanding of this correct?
Yes.
The question is whether you really need a password connection to a local
socket or not?
If so then you will need to make the change and deal with any scripts
that are expecting a password free socket connection.
If not leave it alone. If you want to test password connection then use
a -h localhost to get a host connection.
--
Adrian Klaver
adrian.klaver@xxxxxxxxxxx