Cannot link against libpq on macOS
Hello, I have been struggling with trying to use a current version of libpq to link against on macOS in Xcode. It seems that nothing works, nobody on the web eventually succeeded either as far as I found so far. I try to write a small sample client. I started with the public source download to built libpq itself, which did work. But I am lost as to what files to actually include in my project then. I dragged lib, include, libpq into my project, but then it the compiler complains about the header internal references, so I need to remove lib/ in front of any includes in files, or it doesn’t get found. It makes no difference if I add Linker flags or search paths. PLease, can someone help? Thanks, Alex
How to deny access to Postgres when connected from host/non-local
Hello, I try to deny access to all databases on my server if the user “postgres" tries to connect from a non-local host. Here is what I did in pg_hba.conf: # TYPE DATABASEUSERADDRESS METHOD # "local" is for Unix domain socket connections only local all all md5 # IPv4 local connections: hostall all 127.0.0.1/32md5 # IPv6 local connections: hostall all ::1/128 md5 # Allow replication connections from localhost, by a user with the # replication privilege. local replication all md5 hostreplication all 127.0.0.1/32md5 hostreplication all ::1/128 md5 hostall all 0.0.0.0/0 md5 local all postgrestrust hostall postgres0.0.0.0/0 reject But it continues to allow for Postgres to connect from anywhere through PGAdmin but also as a direct connection to port 5432. I also relaunched the server. This is version 12. What else do I have to do? Thanks for any help. Cheers, Alex
Re: How to deny access to Postgres when connected from host/non-local
Thanks, works. Sent from my iPhone > On Apr 3, 2021, at 11:02, Joe Conway wrote: > > On 4/2/21 7:06 PM, A. Reichstadt wrote: >> Hello, >> I try to deny access to all databases on my server if the user “postgres" >> tries to connect from a non-local host. Here is what I did in pg_hba.conf: >> # TYPE DATABASEUSERADDRESS METHOD >> # "local" is for Unix domain socket connections only >> local all all md5 >> # IPv4 local connections: >> hostall all 127.0.0.1/32md5 >> # IPv6 local connections: >> hostall all ::1/128 md5 >> # Allow replication connections from localhost, by a user with the >> # replication privilege. >> local replication all md5 >> hostreplication all 127.0.0.1/32md5 >> hostreplication all ::1/128 md5 >> hostall all 0.0.0.0/0 md5 >> local all postgrestrust >> hostall postgres0.0.0.0/0 reject >> But it continues to allow for Postgres to connect from anywhere through >> PGAdmin but also as a direct connection to port 5432. I also relaunched the >> server. This is version 12. >> What else do I have to do? >> Thanks for any help. > > See: > https://www.postgresql.org/docs/13/auth-pg-hba-conf.html > > In particular: > > "Each record specifies a connection type, a client IP > address range (if relevant for the connection type), > a database name, a user name, and the authentication > method to be used for connections matching these > parameters. The first record with a matching > connection type, client address, requested database, > and user name is used to perform authentication." > > So your reject line is never being reached. > > HTH, > > Joe > > -- > Crunchy Data - http://crunchydata.com > PostgreSQL Support for Secure Enterprises > Consulting, Training, & Open Source Development
