From 009b0d1a85f85b6f7e83b1094b2ddd5fd3f05b5c Mon Sep 17 00:00:00 2001 From: Bruce Momjian <bruce@momjian.us> Date: Fri, 20 Aug 2004 20:23:06 +0000 Subject: [PATCH] >>At this stage of the game I would just change pg_hba.conf.sample to use >>'127.0.0.1/32' instead of '127.0.0.1 255.255.255.255'. >> >> > >Yeah, that's probably the path of least resistance. Note that the >comments and possibly the SGML docs need to be adjusted to match, >however, so it's not quite a one-liner. Andrew Dunstan --- src/backend/libpq/pg_hba.conf.sample | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/src/backend/libpq/pg_hba.conf.sample b/src/backend/libpq/pg_hba.conf.sample index e857b12bdc3..82efa81a612 100644 --- a/src/backend/libpq/pg_hba.conf.sample +++ b/src/backend/libpq/pg_hba.conf.sample @@ -35,6 +35,9 @@ # encrypted passwords. OPTION is the ident map or the name of the PAM # service. # +# Note: On some Solaris systems, an IP-MASK of 255.255.255.255 is known not to work. +# The corresponding CIDR-MASK of /32 does work. +# # Database and user names containing spaces, commas, quotes and other special # characters can be quoted. Quoting one of the keywords "all", "sameuser" or # "samegroup" makes the name lose its special character, and just match a @@ -49,8 +52,10 @@ # ---------------------------------- # # If you want to allow non-local connections, you need to add more -# "host" records. Also, remember TCP/IP connections are only enabled -# if you enable "tcpip_socket" in postgresql.conf. +# "host" records. In that case you will also need to make PostgreSQL listen +# on a non-local interface via the listen_addresses configuration parameter, or +# the -i or -h command line switches. +# @authcomment@ @@ -58,6 +63,6 @@ local all all @authmethod@ # IPv4-style local connections: -host all all 127.0.0.1 255.255.255.255 @authmethod@ +host all all 127.0.0.1/32 @authmethod@ # IPv6-style local connections: host all all ::1/128 @authmethod@ -- GitLab