From a937b07121d8ab51ba6fb44618254ec13cdcdfa0 Mon Sep 17 00:00:00 2001 From: Magnus Hagander Date: Thu, 19 May 2011 14:03:15 -0400 Subject: [PATCH] Add example for replication in pg_hba.conf Selena Deckelmann --- src/backend/libpq/pg_hba.conf.sample | 8 +++++++- src/bin/initdb/initdb.c | 5 +++++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/src/backend/libpq/pg_hba.conf.sample b/src/backend/libpq/pg_hba.conf.sample index 0a90b68c10..c40696b6b5 100644 --- a/src/backend/libpq/pg_hba.conf.sample +++ b/src/backend/libpq/pg_hba.conf.sample @@ -22,7 +22,9 @@ # plain TCP/IP socket. # # DATABASE can be "all", "sameuser", "samerole", "replication", a -# database name, or a comma-separated list thereof. +# database name, or a comma-separated list thereof. The "all" +# keyword does not match "replication". Access to replication +# must be enabled in a separate record (see example below). # # USER can be "all", a user name, a group name prefixed with "+", or a # comma-separated list thereof. In both the DATABASE and USER fields @@ -80,3 +82,7 @@ host all all 127.0.0.1/32 @authmethod@ # IPv6 local connections: host all all ::1/128 @authmethod@ +# Allow replication connections from localhost, by a user with the +# replication privilege. +# host replication @default_username@ 127.0.0.1/32 @authmethod@ +# host replication @default_username@ ::1/128 @authmethod@ diff --git a/src/bin/initdb/initdb.c b/src/bin/initdb/initdb.c index 56a396bddd..4949af9657 100644 --- a/src/bin/initdb/initdb.c +++ b/src/bin/initdb/initdb.c @@ -1086,6 +1086,11 @@ setup_config(void) "@authcomment@", strcmp(authmethod, "trust") ? "" : AUTHTRUST_WARNING); + /* Replace username for replication */ + conflines = replace_token(conflines, + "@default_username@", + username); + snprintf(path, sizeof(path), "%s/pg_hba.conf", pg_data); writefile(path, conflines);