From: Francis Dupont Date: Sat, 25 Jun 2016 11:58:04 +0000 (+0200) Subject: [4283] Added the everybody is trusted and its fix X-Git-Tag: trac4551_base~34^2~9 X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=c6e01f944553337e60136c2b453b0b8d2c4950d5;p=thirdparty%2Fkea.git [4283] Added the everybody is trusted and its fix --- diff --git a/src/lib/dhcpsrv/database_backends.dox b/src/lib/dhcpsrv/database_backends.dox index 3364e04ceb..104318ece2 100644 --- a/src/lib/dhcpsrv/database_backends.dox +++ b/src/lib/dhcpsrv/database_backends.dox @@ -194,6 +194,18 @@ host all all 127.0.0.1/32 password host all all ::1/128 password @endverbatim + Another possible problem is to get no password prompt, in general because + you have no pg_hba.conf config file and everybody is by default + trusted. As it has a very bad effect on the security you should have + been warned it is a highly unsafe config. The solution is the same, + i.e., require password or md5 authentication method. If you lose + the postgres user access you can add first: +@verbatim +local all postgres trust +@endverbatim + to trust only the local postgres user. Note the postgres user can + be pgsql on some systems. + Please consult your PostgreSQL user manual before applying those changes as those changes may expose your other databases that you run on the same system. In general case, it is a poor idea to run anything of value on a system