Changes between Version 22 and Version 23 of sysadminiptables

Timestamp:

Jun 23, 2009, 7:27:04 PM (14 years ago)

Author:

risard

Comment:

--

sysadminiptables

@@ -7 +7 @@
 [#Configuringiptables Configuring iptables][[BR]]
 [#TestingYourConfig Testing Your Config][[BR]]
+[#SpecialPostgresqlIssues Special Postgresql Issues][[BR]]
 [#NecessaryPorts-DatabaseServer Necessary Ports - Database Server][[BR]]
 [#NecessaryPorts-Open-ilsServer Necessary Ports - Open-ils Server][[BR]]
@@ -177 +178 @@
 
 ----
+== Special Postgresql Issues ==
+
+with postgres, you also need to specifically allow remote hosts to access the server.
+
+To begin with, you need to tell postgres to listen for connections from other hosts rather then just the localhost (the default).
+
+As the postgres user, edit postgresql.conf:
+
+{{{
+    sudo vim /etc/postgresql/8.3/main/postgresql.conf
+}}}
+
+Change:
+
+{{{
+    #listen_addresses = ‘localhost’
+}}}
+
+to:
+
+{{{
+    listen_addresses = ‘<ip address of oils server>’
+}}}
+
+Next, edit pg_hba.conf:
+
+{{{
+    sudo vim /etc/postgresql/8.3/main/pg_hba.conf
+}}}
+
+and in the area marked "Put your actual configuration here," enter the following:
+
+{{{
+    # Put your actual configuration here
+    # ----------------------------------
+    #
+    # If you want to allow non-local connections, you need to add more
+    # "host" records. In that case you will also need to make PostgreSQL listen
+    # on a non-local interface via the listen_addresses configuration parameter,
+    # or via the -i or -h command line switches.
+    #
+
+    host    evergreen       evergreen       10.104.10.168/32      md5
+}}}
+
+  ||connection type|| in this example, host is used.  This means postgres should be looking for a TCP connection (rather then a Unix socket connection for example)||
+  ||database||the name evergreen is being used in this example||
+  ||user||again, in our hypothetical example, evergreen is the username||
+  ||address||the ip address or host name of the machine that's allowed to make a connection.  In real life, this would be the oils server address||
+  ||authentication options||in this case md5 is used, meaning the password is encrypted||
+
+After editing and saving both files, you need to restart postgres.
+
+
+----
 == References ==
 http://iptables-tutorial.frozentux.net/iptables-tutorial.html [[BR]]