public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
From: Joseph <syscon780@gmail.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] PosgreSQL -  pg_hba.conf localhost access only
Date: Thu, 25 Apr 2013 06:35:19 -0600	[thread overview]
Message-ID: <20130425123519.GD24932@syscon7.inet> (raw)
In-Reply-To: <e62ae1dc07d5c6d5e71539fb4c54f66f.squirrel@www.antarean.org>

On 04/25/13 09:10, J. Roeleveld wrote:
>On Thu, April 25, 2013 07:48, Joseph wrote:
>
><SNIP>
>
>> I just tried as you suggested, the only active line in: pg_hba.conf
>>  local     all     all     trust
>>
>> anything else is commented out. I restarted the server but I still can
>> connect to postgresql from another computer via Firefox.
>
>Joseph,
>
>Let me put it in really simple terms:
>1) Firefox is NOT a database client, it can NOT connect to a database
>2) Firefox IS a webbrowser, it ONLY connects to a webserver
>
>This means, Postgresql will NOT see ANY connection made by Firefox.
>
>The website you have running ON TOP OFF apache makes the connection to
>Postgresql.
>
>Eg. it goes like the following:
>
>User <-> Firefox <-> Apache/website <-> Postgresql
>
>Any of the above can ONLY see their immediate neighbour.
>
>--
>Joost

So pg_hba.conf only controls direct connections to postgreSQL. 
Since "apache" group is in postgres user; apache was given permission to access the database in this case py-passing the setting in pg_hba.conf
Is there a way to force sequence:
 Apache/website <-> pg_hba.conf <-> Postgresql

-- 
Joseph


  reply	other threads:[~2013-04-25 12:35 UTC|newest]

Thread overview: 23+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-04-23  0:17 [gentoo-user] PosgreSQL - pg_hba.conf localhost access only Joseph
2013-04-23  8:07 ` J. Roeleveld
2013-04-23 12:37   ` Joseph
2013-04-23 13:44     ` Douglas J Hunley
2013-04-23 13:57     ` J. Roeleveld
2013-04-23 15:47       ` Joseph
2013-04-23 18:10         ` J. Roeleveld
2013-04-23 22:16           ` Joseph
2013-04-24  5:11             ` J. Roeleveld
2013-04-24 12:40               ` Joseph
2013-04-24 20:27                 ` J. Roeleveld
2013-04-24 23:48                   ` Joseph
2013-04-25  7:14                     ` J. Roeleveld
2013-04-25  0:23                   ` Joseph
2013-04-25  5:16                     ` Dustin C. Hatch
2013-04-25  5:48                       ` Joseph
2013-04-25  7:10                         ` J. Roeleveld
2013-04-25 12:35                           ` Joseph [this message]
2013-04-25 16:57                             ` J. Roeleveld
2013-04-25 18:26                               ` Joseph
2013-04-26  6:59                                 ` J. Roeleveld
2013-04-27  0:25 ` James Cloos
2013-04-27  1:11   ` Joseph

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20130425123519.GD24932@syscon7.inet \
    --to=syscon780@gmail.com \
    --cc=gentoo-user@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox