May 2019
Intermediate to advanced
600 pages
20h 46m
English
The pg_hba.conf file is where we specify the host-based authentication rules. We do not specify the authentications themselves; just specify which authentication mechanisms will be used. This is the top-level set of rules for PostgreSQL authentication. The rules are specified in a file and applied by the postmaster process when connections are attempted. To prevent denial-of-service attacks, the HBA rules never involve database access, so we do not know whether a user is a superuser. As a result, you can lock out all users, but note that you can always re-enable access by editing the file and reloading.
Read now
Unlock full access