Re: [Gnumed-devel] Re: Gnumed Debian packaging lagging behind...

[Ian Haywood]

On Fri, 5 Nov 2004 07:31:04 +0100 (CET)
Andreas Tille <address@hidden> wrote:

> We should take this very serious.  Could you please describe in detail what
> did not work.  Please try to start from an unchanged 
> /etc/postgresql/pg_hba.conf
> and report what happens after installing the server package.  I observed the
Here is the stock Debian pg_hba.conf

# TYPE  DATABASE    USER        IP-ADDRESS        IP-MASK           METHOD
# Database administrative login by UNIX sockets
local   all         postgres                                        ident 
sameuser
#
# All other connections by UNIX sockets
local   all         all                                             ident 
sameuser
#
# All IPv4 connections from localhost
host    all         all         127.0.0.1         255.255.255.255   ident 
sameuser
#
# All IPv6 localhost connections
host    all         all         ::1               
ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff        ident sameuser
host    all         all         ::ffff:127.0.0.1/128                ident 
sameuser
#
# reject all other connection attempts
host    all         all         0.0.0.0           0.0.0.0           reject

The big problem is the only authentication method is "ident sameuser", however
gnumed wants to connect as users that don't exist as system users, such a
"gm-dbowner" and "test-doc". [note these names are configurable, by renaming 
them to 
real system users it may be possible to get gnumed working with this default 
file] 

I have found the most restrictive option that still allows gnumed install is

local    all            postgres      ident sameuser # so postgres can connect 
w/o password
local    gnumed  all                 md5     # allows any user to connect with 
password, but only to gnumed

Gnumed *should* work solely through a UNIX socket connection. If code has crept 
back in that assumes
a TCP/IP connection, please report it for fixing.

Ian

-- 
PGP public key E750652E at wwwkeys.pgp.net
9BF0 67B7 F84F F7EE 0C42  C063 28FC BC52 E750 652E

pgpnFSlgjCHHp.pgp
Description: PGP signature