Package: postgresql-9.1
Version: 9.1.4-2~bpo60+1
Severity: important
I have installed the backported version of postgresql,
but if instaled this release first any user can connect by remote hosts,
i mean from another computer connections are impossible, the port 5432
are closed
even if postgres, firewall and any thing are configured without security!!!!
I put all information here and
I described how i solved but tthis method are not the right ok:
1) i installed all components from backports in clean env,
for postgres at today and sure there's no 8.X component instaled.
2) i have setup with trust for all users over local o remote,
using default port and listen on all address.
I cannot conect, also by scaning ports i can see the postgresql port open..
the firewall are all gone, no firewall rules , no other services using the port.
3)i reinstaled older version 8.4 for squeeze and then i can connect again..
in this process i also reinstall pgpool from 3 to 1.3
4)then back to newer backported included pgpool 3 and slony from testing
and now port apears by magic!
THIS ITS SERIOUSLY VERY RARE, i think postgresql 8.X let remaining some files
and then postgresql 9.X use and base thems..
sorry for no more information i not have more time for that.. but u must see
if this are in wheeze , due are a important bug that let unusefully
the DBMS 9.X in next stable!!!!
------- pg_hba.conf file dump:
# Database administrative login by Unix domain socket
local all postgres peer
# TYPE DATABASE USER ADDRESS METHOD
# "local" is for Unix domain socket connections only
local all all trust
# IPv4 local connections:
host all all trust
------- line to listen are here:
listen_addresses = '*' # what IP address(es) to listen on;
# comma-separated list of addresses;
# defaults to 'localhost', '*' = all
# (change requires restart)
port = 5432 # (change requires restart)
------- commands showing no ports available if host are used:
root@sysdevel:/var/log# /etc/init.d/postgresql restart
Restarting PostgreSQL 9.1 database server: main.
root@sysdevel:/var/log# netstat -nxl | grep PGSQL
unix 2 [ ACC ] STREAM LISTENING 940787
/var/run/postgresql/.s.PGSQL.5433
root@sysdevel:/var/log# nmap 37.10.254.20
Starting Nmap 5.00 ( http://nmap.org ) at 2012-08-09 11:45 VET
Interesting ports on 37.10.254.20:
Not shown: 996 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
111/tcp open rpcbind
8080/tcp open http-proxy
Nmap done: 1 IP address (1 host up) scanned in 5.55 seconds
root@sysdevel:/var/log# ifconfig
eth0 Link encap:Ethernet HWaddr bc:30:5b:e3:11:48
inet addr:37.10.254.20 Bcast:37.10.254.255 Mask:255.255.255.0
inet6 addr: fe80::be30:5bff:fee3:1148/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:57963800 errors:0 dropped:0 overruns:0 frame:0
TX packets:69683382 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:37871383513 (35.2 GiB) TX bytes:84903352963 (79.0 GiB)
Interrupt:16
-- System Information:
Debian Release: 6.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 3.2.0-0.bpo.2-686-pae (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages postgresql-9.1 depends on:
ii libc6 2.11.3-3 Embedded GNU C Library: Shared lib
ii libcomerr2 1.41.12-4stable1 common error description library
ii libgssapi-krb5-2 1.8.3+dfsg-4squeeze6 MIT Kerberos runtime libraries - k
ii libkrb5-3 1.8.3+dfsg-4squeeze6 MIT Kerberos runtime libraries
ii libldap-2.4-2 2.4.23-7.2 OpenLDAP libraries
ii libpam0g 1.1.1-6.1+squeeze1 Pluggable Authentication Modules l
ii libpq5 9.1.4-2~bpo60+1 PostgreSQL C client library
ii libssl0.9.8 0.9.8o-4vnz1 SSL and crypto shared libraries
ii libxml2 2.7.8.dfsg-2+squeeze5 GNOME XML library
ii locales 2.11.3-3 Embedded GNU C Library: National L
ii postgresql-client- 9.1.4-2~bpo60+1 front-end programs for PostgreSQL
ii postgresql-common 130~bpo60+2 PostgreSQL database-cluster manage
ii ssl-cert 1.0.28 simple debconf wrapper for OpenSSL
ii tzdata 2012c-0squeeze1 time zone and daylight-saving time
postgresql-9.1 recommends no packages.
Versions of packages postgresql-9.1 suggests:
pn locales-all <none> (no description available)
pn oidentd | ident-server <none> (no description available)
--
Lenz McKAY Gerardo (PICCORO)
http://qglochekone.blogspot.com
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
