Re: pam authentication for postgres

I did go back and edit the files manually. As far as I can tell it is entered
correctly in the pg_hba.conf file

-----Original Message-----
From: Alvaro Herrera [mailto:alvherre(at)dcc(dot)uchile(dot)cl]
Sent: Tuesday, November 25, 2003 3:08 PM
To: Jason Tesser
Cc: Pgsql (E-mail)
Subject: Re: [GENERAL] pam authentication for postgres

On Tue, Nov 25, 2003 at 02:29:05PM -0600, Jason Tesser wrote:

> I am trying to authenticate POstgres using Pam. How do I do this. I
> tried using webmin on RH9 and telling it to use Pam for authentication
> but it doesn't seem to work.

Try hacking the pg_hba.conf file. The documentation and the source both
seem to imply that it should work ... No idea whether webmin handles it
though; I prefer to manually edit the files.

--
Alvaro Herrera (<alvherre[a]dcc.uchile.cl>)
"La conclusión que podemos sacar de esos estudios es que
no podemos sacar ninguna conclusión de ellos" (Tanenbaum)

Jason Tesser wrote:

>I did go back and edit the files manually. As far as I can tell it is entered
>correctly in the pg_hba.conf file
>

Follow the instructions in this article:

http://archives.postgresql.org/pgsql-advocacy/2003-05/msg00058.php

well, the quoted stuff ... anyway, I verified that it still works with
REL7_4_STABLE. Please note that you will not be able to use any
"trusted" PAM authentification based on userid or the like, since the
process doing the lookup is the database backend allways executing under
the PostgreSQL unix user.

Jan

>
>-----Original Message-----
>From: Alvaro Herrera [mailto:alvherre(at)dcc(dot)uchile(dot)cl]
>Sent: Tuesday, November 25, 2003 3:08 PM
>To: Jason Tesser
>Cc: Pgsql (E-mail)
>Subject: Re: [GENERAL] pam authentication for postgres
>
>
>On Tue, Nov 25, 2003 at 02:29:05PM -0600, Jason Tesser wrote:
>
>
>
>>I am trying to authenticate POstgres using Pam. How do I do this. I
>>tried using webmin on RH9 and telling it to use Pam for authentication
>>but it doesn't seem to work.
>>
>>
>
>Try hacking the pg_hba.conf file. The documentation and the source both
>seem to imply that it should work ... No idea whether webmin handles it
>though; I prefer to manually edit the files.
>
>
>

--

#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me. #
#================================================== JanWieck(at)Yahoo(dot)com #

On Tuesday 25 November 2003 21:13, Jason Tesser wrote:
> I did go back and edit the files manually. As far as I can tell it is
> entered correctly in the pg_hba.conf file

Do you have a file set up on the pam side of things? Each service using pam
should have a config file (in /etc/pam.d on redhat). What you should put in
there, I can't say but a search for pam on the linux documentation project
(http://tldp.org) will give you some howtos.

--
Richard Huxton
Archonet Ltd