mirror of
				https://github.com/postgres/postgres.git
				synced 2025-10-29 22:49:41 +03:00 
			
		
		
		
	
		
			
				
	
	
		
			44 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			Groff
		
	
	
	
	
	
			
		
		
	
	
			44 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			Groff
		
	
	
	
	
	
| .\" This is -*-nroff-*-
 | |
| .\" XXX standard disclaimer belongs here....
 | |
| .\" $Header: /cvsroot/pgsql/doc/man/Attic/pg_hba.5,v 1.1.1.1 1996/08/18 22:14:26 scrappy Exp $
 | |
| .TH PG_HBA FILES 01/20/96 Postgres95 Postgres95
 | |
| .SH NAME
 | |
| $PGDATA/pg_hba \(em host-based access control
 | |
| .SH DESCRIPTION
 | |
| Postgres provides host-based access control through the file
 | |
| .BR "pg_hba".
 | |
| This file is stored in $PGDATA and should have proper file permissions
 | |
| so that casual users cannot modify it.  The file stores permissions
 | |
| information about which hosts are authorized to access databases.
 | |
| .PP
 | |
| The file consists of lines of three columns.  The first column lists the
 | |
| name of the database.  The second column lists the IP address of clients
 | |
| machines that are authorized to connect, and the third column provides a
 | |
| bit mask for the IP address.  Lines which begin with '#' are considered
 | |
| comments. 
 | |
| .PP
 | |
| The keyword "all" can be used to apply to all database names.  Each
 | |
| column can contain strings of at most 80 characters, and each database
 | |
| may have up to 255 configuration lines that apply.  (80 and 255 are
 | |
| constants that can be changed at Postgres compile time by altering the
 | |
| #defines MAX_TOKEN and MAX_LINES in src/backend/libpq/auth.c)
 | |
| .PP
 | |
| Below is the default pg_hba file that is installed.
 | |
| .nf
 | |
| #
 | |
| # Example config file for Postgres95 host based access
 | |
| #
 | |
| # Lines starting with "all" apply to all databases.  Otherwise the first
 | |
| # column has to match the name of the database being connected to.  Up to
 | |
| # ten config lines can apply to each database.  Mask specifies bits that 
 | |
| # aren't counted. After those bits are taken out, the connection address 
 | |
| # must match the address in the middle column.
 | |
| #
 | |
| # <name>	<address>	<mask>
 | |
| #
 | |
| all		127.0.0.1	0.0.0.0
 | |
| .fi
 | |
| .SH "SEE ALSO"
 | |
| introduction(1).
 | |
| 
 |