Hi... Martin, On Mon, 5 Jun 2006 17:16:43 +0200, Martin Pitt wrote > Hi Janos, > > János Holányi [2006-06-05 7:31 +0200]: > > Hi Matt, > > Martin :)
Hehe, sorry - good memory here :) > > I've just done a security upgrade and bumped into this: > > > > Setting up postgresql (7.4.7-6sarge2) ... > > pg_hba.conf contains a field after the authentication specification; > > the file is corrupt or has already been converted. > > Hm, let me assure you that this security update did not change > anything in the way pg_hba.conf is parsed and evaluated, so this > seems to have been a hidden 'bomb' just waiting for a server restart. ...for a server start... since the processes are not running (were stopped during the new package install I guess). (the output I sent you was not the first upgrade attempt) > > What to do, how to step on? What's wrong with pg_hba.conf? > > I can't tell unless you send it to me. :) However, the error message > 'pg_hba.conf contains a field after the authentication specification' > already gives a good hint what to look out for. I couldn't spot any errors in pg_hba.conf However, I replaced /etc/postgresql/pg_hba.conf with /usr/share/postgresql/pg_hba.conf.sample and the upgrade went on smoothly. Here's the diff: # diff -u /usr/share/postgresql/pg_hba.conf.sample /etc/postgresql/pg_hba.conf --- /usr/share/postgresql/pg_hba.conf.sample 2006-05-30 15:51:00.000000000 +0200 +++ /etc/postgresql/pg_hba.conf 2006-06-05 07:18:54.000000000 +0200 @@ -95,6 +95,11 @@ host all all ::1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff ident sameuser host all all ::ffff:127.0.0.1/128 ident sameuser # -# reject all other connection attempts -host all all 0.0.0.0 0.0.0.0 reject +host horde2 127.0.0.1 255.0.0.0 password + +# pgppgadmin: +local all all password +host all all 127.0.0.1 255.255.255.255 password +# reject all other connection attempts +host all all 0.0.0.0 0.0.0.0 reject \ No newline at end of file Any ideas? Thanks a great deal. Regards, Csani > Greetings, > > Martin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
