[PATCH configure] BZ #857168 - only require host/hostssl postgres connections to use md5 auth

John Eckersberg jeckersb at redhat.com
Fri Sep 14 01:14:05 UTC 2012


Mo Morsi <mmorsi at redhat.com> writes:

> ---
>  recipes/aeolus/manifests/conductor.pp | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/recipes/aeolus/manifests/conductor.pp b/recipes/aeolus/manifests/conductor.pp
> index ef1e1d6..80ff3bb 100644
> --- a/recipes/aeolus/manifests/conductor.pp
> +++ b/recipes/aeolus/manifests/conductor.pp
> @@ -104,8 +104,8 @@ class aeolus::conductor inherits aeolus {
>                 notify  => Service['postgresql']}
>      }
>      exec{ "pgauthuser":
> -      command     => "sed -i s/ident/md5/ /var/lib/pgsql/data/pg_hba.conf",
> -      onlyif      => 'grep -q ident /var/lib/pgsql/data/pg_hba.conf',
> +      command     => 'sed -i "s/host\(ssl\)*\(.*\)ident/host\1\2md5/" /var/lib/pgsql/data/pg_hba.conf',
> +      onlyif      => 'grep -r "host.*ident" /var/lib/pgsql/data/pg_hba.conf',
>        require     => Exec["pginitdb"],
>        notify      => Service["postgresql"]
>      }
> -- 
> 1.7.11.4

Looks good, ACK and pushed.



More information about the aeolus-devel mailing list