Re: BUG #4450: Postgres do not ask for passord

The following bug has been logged online:

Bug reference: 4450
Logged by: Carlos
Email address: cadup(at)ig(dot)com(dot)br
PostgreSQL version: 8.2
Operating system: linux
Description: Postgres do not ask for passord
Details:

I have one user that is a superuser. The pg_hba.conf is set to use md5
specific to this user. When I connect the postgresql do not ask for the
password. If I change the pg_hba.con to reject, it works. Do you know what
is the problem?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Oct 05, 2008 at 02:42:31PM +0000, Carlos wrote:
>
> The following bug has been logged online:
>
> Bug reference: 4450
> Logged by: Carlos
> Email address: cadup(at)ig(dot)com(dot)br
> PostgreSQL version: 8.2
> Operating system: linux
> Description: Postgres do not ask for passord
> Details:
>
> I have one user that is a superuser. The pg_hba.conf is set to use md5
> specific to this user. When I connect the postgresql do not ask for the
> password. If I change the pg_hba.con to reject, it works. Do you know what
> is the problem?

Maybe you still have an entry like

local all all trust

somewhere in pg_hba.conf?

Regards
- -- tomás
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFI6O0kBcgs9XrR2kYRAnYHAJ40uG8aDUGazJInKvscyuIlgDDEDACfcr1Q
SFXPA0Q4JW8Y04HRsstiYOc=
=lIC2
-----END PGP SIGNATURE-----

On Sun, Oct 5, 2008 at 10:06 PM, <tomas(at)tuxteam(dot)de> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Sun, Oct 05, 2008 at 02:42:31PM +0000, Carlos wrote:
> >
> > The following bug has been logged online:
> >
> > Bug reference: 4450
> > Logged by: Carlos
> > Email address: cadup(at)ig(dot)com(dot)br
> > PostgreSQL version: 8.2
> > Operating system: linux
> > Description: Postgres do not ask for passord
> > Details:
> >
> > I have one user that is a superuser. The pg_hba.conf is set to use md5
> > specific to this user. When I connect the postgresql do not ask for the
> > password. If I change the pg_hba.con to reject, it works. Do you know
> what
> > is the problem?
>
> Maybe you still have an entry like
>
> local all all trust
>
> somewhere in pg_hba.conf?

Posting both your versions of pg_hba.conf would help. (Strip out the
commented lines).

Best regards,
--
gurjeet[(dot)singh](at)EnterpriseDB(dot)com
singh(dot)gurjeet(at){ gmail | hotmail | indiatimes | yahoo }.com

EnterpriseDB http://www.enterprisedb.com

Mail sent from my BlackLaptop device

This is my pg_hba.conf:

# TYPE DATABASE USER CIDR-ADDRESS METHOD

host all postgres 0.0.0.0/0 reject

local bancoX userX trust

local all all md5

host all all 127.0.0.1/32 md5

host all userY 0.0.0.0/0 md5

host bancoX all 0.0.0.0/0 md5

host all all 0.0.0.0/0 reject

If I try a remote Access using psql or pgadmin and the user is userY it
Access and do not ask for password.

If I use other user it ask for password.

If I change the pg_hba.conf to

# TYPE DATABASE USER CIDR-ADDRESS METHOD

host all postgres 0.0.0.0/0 reject

local bancoX userX trust

local all all md5

host all all 127.0.0.1/32 md5

host all userY 0.0.0.0/0 reject

host bancoX all 0.0.0.0/0 md5

host all all 0.0.0.0/0 reject

It reject correctly my Access.

I realy think this is a bug.

I tryed drop and recreate the user and continue the same.

Tanks for help,

Carlos

De: Gurjeet Singh [mailto:singh(dot)gurjeet(at)gmail(dot)com]
Enviada em: domingo, 5 de outubro de 2008 19:59
Para: tomas(at)tuxteam(dot)de
Cc: Carlos; pgsql-bugs(at)postgresql(dot)org
Assunto: Re: [BUGS] BUG #4450: Postgres do not ask for passord

On Sun, Oct 5, 2008 at 10:06 PM, <tomas(at)tuxteam(dot)de> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Oct 05, 2008 at 02:42:31PM +0000, Carlos wrote:
>
> The following bug has been logged online:
>
> Bug reference: 4450
> Logged by: Carlos
> Email address: cadup(at)ig(dot)com(dot)br
> PostgreSQL version: 8.2
> Operating system: linux
> Description: Postgres do not ask for passord
> Details:
>
> I have one user that is a superuser. The pg_hba.conf is set to use md5
> specific to this user. When I connect the postgresql do not ask for the
> password. If I change the pg_hba.con to reject, it works. Do you know what
> is the problem?

Maybe you still have an entry like

local all all trust

somewhere in pg_hba.conf?

Posting both your versions of pg_hba.conf would help. (Strip out the
commented lines).

Best regards,

--
gurjeet[(dot)singh](at)EnterpriseDB(dot)com
singh(dot)gurjeet(at){ gmail | hotmail | indiatimes | yahoo }.com

EnterpriseDB http://www.enterprisedb.com

Mail sent from my BlackLaptop device

"Cadu" <cadup(at)ig(dot)com(dot)br> writes:
> If I try a remote Access using psql or pgadmin and the user is userY it
> Access and do not ask for password.
> If I use other user it ask for password.

Hmm, there's nothing in your pg_hba.conf to explain that. I think maybe
you have a ~/.pgpass file (I forget how it's spelled on Windows) that is
silently supplying userY's password on the client side.

regards, tom lane