Postgresql configuration
Issue #599
resolved
I noticed a difference in postgresql configuration between recent versions and much older versions (e.g. v0.4.2). The previous configuration would be more compatible with other applications on the same machine using a different database within the same postgresql-cluster, I guess? Was there a good reason for changing this?
"local openrem_db openrem_user md5" vs "local all all md5"
v0.4.2:
The default security settings are too restrictive to allow access to the database. • sudo nano /etc/postgresql/9.1/main/pg_hba.conf • Add the following line: – local openrem_db openrem_user md5 • sudo /etc/init.d/postgresql restart
v0.8.0b1:
The default security settings are too restrictive to allow access to the database. Assumes version 9.4, change as appropriate. sudo nano /etc/postgresql/9.4/main/pg_hba.conf Scroll down to the bottom of the file and edit the following line from peer to md5: local all all md5 Don’t worry about any lines that start with a # as they are ignored. If you can’t access the database when everything else is configured, you might need to revisit this file and see if there are other lines with a method of peer that need to be md5 Restart PostgreSQL so the new settings take effect: sudo service postgresql restart
Comments (6)
-
-
reporter Sounds like a good solution indeed!
-
Adding note about setting security for specific databases where required. Refs
#599→ <<cset 84226b755f77>>
-
Correcting syntax error, plus slight modification pointing to nano tips Refs
#599→ <<cset b87b80a722d0>>
-
- changed status to resolved
Minor correction and changes upadated. Fixes
#599→ <<cset 09efecdf3ad6>>
-
- changed milestone to 0.8.0
-
assigned issue to
- Log in to comment
Hi @tcdewit. It was simply for convenience and simplicity so I could reduce the number of substitutions people make depending on the database name and user name. For most people, I think
all all
is ok. For more advanced users, then maybe specifying the database and or the user could be useful.We could add in a simple note to say that the database name or username can be specified if you don't want a global setting.