Re: [GENERAL] Remote Authentication

wim wrote:
>
> Hi Sean,
>
> I'm approaching my database over the internet as well. I wondered what you
> use to connect to the database,
> are you using ODBC or is there a httpd server connecting to the database
> using some module like php?
> If the last one is the case, then the machine running the httpd server is
> accessing your database, not the clients on the internet.
> Depending on how you would like to access the database your
> /etc/rc.d/init.d/postgresql file must contain something like this. Read the
> manual page on  the option -i
>
> su postgres -c '/usr/bin/postmaster -i -S -D/var/lib/pgsql'
>
> the pg_hba.conf should contain something like this:
>
> local        dbname                                       password
> ./data/sqlpasswd
> host         all        0.0.0.0       0.0.0.0            password
> ./data/sqlpasswd'

I am running postgres as user www.  postmaster -i -S -D
/usr/local/pgsql/data

In my init I have: su www -c '/usr/local/pgsql/bin/postmaster -i -S -D
/usr/local/pgsql/data'

Everything works fine with my webserver connecting via perl.  Everything
is fine for me connecting remotely using psql -h apollo if I have trust
access on.  But, it all goes to pot when I do this in my pg_hba.conf:
host    all     192.168.0.0     255.255.0.0     password sqlpasswd
I have even tried full path and ./data/sqlpasswd, by your suggestion
above.  My env vars are:
PGLIB=/usr/local/pgsql/lib
PGDATA=/usr/local/pgsql/data
My sqlpasswd file is:
apollo:~/sql/data$ cat sqlpasswd
root:passwd:10794:0:::::
bits:passwd:10796:0:99999:7:::
asns:dfljskdflsjdf:10816:0:99999:7:::
ednabuil:sdfsdfs:10812:0:99999:7:::
asns2:sdfsdf:10816:0:99999:7:::
frayhall:sdfsdfs:10819:0:99999:7:::
www:sdfsdfsdf:10836:0:99999:7:::

pg_passwd will allow me to change the passwords in the this file, so it
is readable to postgres, but when I try remote connect I get:

bits:~$ psql -a password -h apollo -u
Username: www
Password:

Connection to database 'www' failed.
User authentication failed

Same when I exchange crypt for password.  Anything else you might know
of?