diff options
| author | Francis Dupont <fdupont@isc.org> | 2016-06-25 13:58:04 +0200 |
|---|---|---|
| committer | Francis Dupont <fdupont@isc.org> | 2016-06-25 13:58:04 +0200 |
| commit | c6e01f944553337e60136c2b453b0b8d2c4950d5 (patch) | |
| tree | 123dee790d062e0a4498dc6a6ecf2aa17d54c50d /src/lib/dhcpsrv/database_backends.dox | |
| parent | [master] addressed cpp-check issues detected on Jenkins. (diff) | |
| download | kea-c6e01f944553337e60136c2b453b0b8d2c4950d5.tar.xz kea-c6e01f944553337e60136c2b453b0b8d2c4950d5.zip | |
[4283] Added the everybody is trusted and its fix
Diffstat (limited to 'src/lib/dhcpsrv/database_backends.dox')
| -rw-r--r-- | src/lib/dhcpsrv/database_backends.dox | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/src/lib/dhcpsrv/database_backends.dox b/src/lib/dhcpsrv/database_backends.dox index 3364e04ceb..104318ece2 100644 --- a/src/lib/dhcpsrv/database_backends.dox +++ b/src/lib/dhcpsrv/database_backends.dox @@ -194,6 +194,18 @@ host all all 127.0.0.1/32 password host all all ::1/128 password @endverbatim + Another possible problem is to get no password prompt, in general because + you have no <tt>pg_hba.conf</tt> config file and everybody is by default + trusted. As it has a very bad effect on the security you should have + been warned it is a highly unsafe config. The solution is the same, + i.e., require password or md5 authentication method. If you lose + the postgres user access you can add first: +@verbatim +local all postgres trust +@endverbatim + to trust only the local postgres user. Note the postgres user can + be pgsql on some systems. + Please consult your PostgreSQL user manual before applying those changes as those changes may expose your other databases that you run on the same system. In general case, it is a poor idea to run anything of value on a system |