The problem was mostly related to my system setup.
However, it might be worth adding a little info to the README.Debian.
The two key points I missed were
1) leave the hostname blank when making a connection to use sockets
(for this package)
2) if not using sockets, you need a properly running ident service.
(for postgresql package)

Because of that, I'm leaving this open.  However, it's OK to close it
if you don't want to do anything.  My search of debian-user revealed
that a number of people are confused about authentication with
postgres, though mostly they hadn't made the first step of reading
README.Debian.  So it's unlikely further material there will help :(.

I also sent this info to the upstream discussion list.

Here's the fuller explanation I sent to debian-user:
------------------------------------------------------
I am trying to use a GUI to do some work on a local postgres database.
I was using pgaccess a year ago, but recently found it couldn't
connect because of an ident failure.  I've tried a bunch of other
tools (pgamdin3, knoda, mergeant, and gnome-db) with mostly the same
problem.

I have not messed with the default authorization and access settings
for postgres.

Since I can connect with psql, I developed  a theory: the front ends
only connect with tcp, not sockets (I have tried a blank hostname a
few times).

I needed to do all the following to make things work:
* install a package providing identd (I used midentd)
* Enable the service in /etc/inetd.conf
In this case, I used
auth    stream  tcp     nowait  identd  /usr/sbin/midentd    midentd

The line in the file by default uses ident as the first field; I don't
know if that matters.  (I suspect it doesn't, because with both
present I got an error about duplicate entries).

The default specifies /usr/sbin/identd, but that wasn't present
(should there be some /etc/alternatives going on so this works?).

The default was wait.

I got the above line by modifying one in the midentd docs.  Those gave
the user as nobody, but that did not work to authenticate.

My default tcpwrapper (/etc/hosts.*) and firewalling allow local
connections; they might also need to be tweaked in some cases.  I
can't tell for sure if midentd uses tcpwrappers.

Though I seem to have got things working, any of the following forms
of follow up would be helpful:
1) how to get a GUI client to use sockets (or the name of client that
can use them)
2) recommended identd flavors and setup;
or
3) a sensible, safe way to modify my postgres authentication (I've
seen some suggestions about making it wide open, but I'd rather not.
For starters, I don't even want all users on the local system to be
able to mess with all the databases).

My setup is basically a single user system, though I do network with
another system (which mostly runs MS Windows, but does use my system
for internet access with NAT).




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to