[PATCH configure] BZ #857168 - only require host/hostssl postgres connections to use md5 auth

Mo Morsi mmorsi at redhat.com
Thu Sep 13 20:36:01 UTC 2012


---
 recipes/aeolus/manifests/conductor.pp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/recipes/aeolus/manifests/conductor.pp b/recipes/aeolus/manifests/conductor.pp
index ef1e1d6..80ff3bb 100644
--- a/recipes/aeolus/manifests/conductor.pp
+++ b/recipes/aeolus/manifests/conductor.pp
@@ -104,8 +104,8 @@ class aeolus::conductor inherits aeolus {
                notify  => Service['postgresql']}
     }
     exec{ "pgauthuser":
-      command     => "sed -i s/ident/md5/ /var/lib/pgsql/data/pg_hba.conf",
-      onlyif      => 'grep -q ident /var/lib/pgsql/data/pg_hba.conf',
+      command     => 'sed -i "s/host\(ssl\)*\(.*\)ident/host\1\2md5/" /var/lib/pgsql/data/pg_hba.conf',
+      onlyif      => 'grep -r "host.*ident" /var/lib/pgsql/data/pg_hba.conf',
       require     => Exec["pginitdb"],
       notify      => Service["postgresql"]
     }
-- 
1.7.11.4




More information about the aeolus-devel mailing list