Package: postgresql
Version: 7.5.21
Severity: normal

Some packages require some users to be able to access some databases
under the user name "postgres" with IDENT auth. This is done by adding
a line

 local   <dbname>     postgres              IDENT postgres-alikes

to pg_hba.conf and lines like

 postgres-alikes      postgres            postgres
 postgres-alikes      <user>              postgres

to pg_ident.conf.

The first line above in pg_ident.conf ensures that real postgres can still
access the database, too, because PG authentication does not "fall through"
but rather stops at the first matching pg_hba.conf entry.

So configured pg_ctlcluster says

 WARNING: You removed the first pg_hba.conf entry that granted local 
passwordless
 access to the database superuser. Disabling startup checks.

The first sentence is true, of course, while the conclusion does not follow.

I suggest pg_ctlcluster *try* doing a passwordless access to the database
before claiming it has to disable the checks. In the above scenario it would
indeed still work.

This isn't really a showstopper but it would improve robustness.

Karsten

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-2-k7
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages postgresql depends on:
ii  postgresql-7.4                1:7.4.13-5 object-relational SQL database, ve
ii  postgresql-client             7.5.21     front-end programs for PostgreSQL 
ii  postgresql-common             59         manager for PostgreSQL database cl

Versions of packages postgresql recommends:
pn  postgresql-plperl-7.4         <none>     (no description available)
ii  postgresql-plpython-7.4       1:7.4.13-5 PL/Python procedural language for 
pn  postgresql-pltcl-7.4          <none>     (no description available)

-- debconf information:
  postgresql/upgrade/preserve_location: $PGDATA/..
  postgresql/settings/day_month_order: European
  postgresql/upgrade/policy: true
  postgresql/enable_lang: true
  postgresql/very_old_version_warning: true
  postgresql/upgrade/dump_location: $PGDATA/..
  postgresql/convert-pg_hba.conf: true
  postgresql/initdb/location: /var/lib/postgres/data
  postgresql/settings/locale: C
  postgresql/purge_data_too: false


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to