Changes between Version 14 and Version 15 of sysadminPostgreSQLConfiguration

Timestamp:

Jun 23, 2009, 7:19:29 PM (14 years ago)

Author:

risard

Comment:

--

sysadminPostgreSQLConfiguration

@@ -291 +291 @@
 For a complete discussion of iptables see [wiki:sysadminiptables iptables and network configuration].  For the specific ports needed by the postgres server see [wiki:sysadminiptables#NecessaryPorts-DatabaseServer Necessary Ports - Database Server].
  
-
+However, with postgres, you also need to specifically allow remote hosts to access the server.
+
+To begin with, you need to tell postgres to listen for connections from other hosts rather then just the localhost (the default).
+
+As the postgres user, edit postgresql.conf:
+
+{{{
+    sudo vim /etc/postgresql/8.3/main/postgresql.conf
+}}}
+
+Change:
+
+{{{
+    #listen_addresses = ‘localhost’
+}}}
+
+to:
+
+{{{
+    listen_addresses = ‘<ip address of oils server>’
+}}}
+
+Next, edit pg_hba.conf:
+
+{{{
+    sudo vim /etc/postgresql/8.3/main/pg_hba.conf
+}}}
+
+and in the area marked "Put your actual configuration here," enter the following:
+
+{{{
+    # Put your actual configuration here
+    # ----------------------------------
+    #
+    # If you want to allow non-local connections, you need to add more
+    # "host" records. In that case you will also need to make PostgreSQL listen
+    # on a non-local interface via the listen_addresses configuration parameter,
+    # or via the -i or -h command line switches.
+    #
+
+    host    evergreen       evergreen       10.104.10.168/32      md5
+}}}
+
+  ||connection type|| in this example, host is used.  This means postgres should be looking for a TCP connection (rather then a Unix socket connection for example)||
+  ||database||the name evergreen is being used in this example||
+  ||user||again, in our hypothetical example, evergreen is the username||
+  ||address||the ip address or host name of the machine that's allowed to make a connection.  In real life, this would be the oils server address||
+  ||authentication options||in this case md5 is used, meaning the password is encrypted||