1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>[60] - add login management to postgresql</title>
</head>
<body>
<style type="text/css"><!--
#msg dl.meta { border: 1px #006 solid; background: #369; padding: 6px; color: #fff; }
#msg dl.meta dt { float: left; width: 6em; font-weight: bold; }
#msg dt:after { content:':';}
#msg dl, #msg dt, #msg ul, #msg li, #header, #footer, #logmsg { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; }
#msg dl a { font-weight: bold}
#msg dl a:link { color:#fc3; }
#msg dl a:active { color:#ff0; }
#msg dl a:visited { color:#cc6; }
h3 { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; font-weight: bold; }
#msg pre { overflow: auto; background: #ffc; border: 1px #fa0 solid; padding: 6px; }
#logmsg { background: #ffc; border: 1px #fa0 solid; padding: 1em 1em 0 1em; }
#logmsg p, #logmsg pre, #logmsg blockquote { margin: 0 0 1em 0; }
#logmsg p, #logmsg li, #logmsg dt, #logmsg dd { line-height: 14pt; }
#logmsg h1, #logmsg h2, #logmsg h3, #logmsg h4, #logmsg h5, #logmsg h6 { margin: .5em 0; }
#logmsg h1:first-child, #logmsg h2:first-child, #logmsg h3:first-child, #logmsg h4:first-child, #logmsg h5:first-child, #logmsg h6:first-child { margin-top: 0; }
#logmsg ul, #logmsg ol { padding: 0; list-style-position: inside; margin: 0 0 0 1em; }
#logmsg ul { text-indent: -1em; padding-left: 1em; }#logmsg ol { text-indent: -1.5em; padding-left: 1.5em; }
#logmsg > ul, #logmsg > ol { margin: 0 0 1em 0; }
#logmsg pre { background: #eee; padding: 1em; }
#logmsg blockquote { border: 1px solid #fa0; border-left-width: 10px; padding: 1em 1em 0 1em; background: white;}
#logmsg dl { margin: 0; }
#logmsg dt { font-weight: bold; }
#logmsg dd { margin: 0; padding: 0 0 0.5em 0; }
#logmsg dd:before { content:'\00bb';}
#logmsg table { border-spacing: 0px; border-collapse: collapse; border-top: 4px solid #fa0; border-bottom: 1px solid #fa0; background: #fff; }
#logmsg table th { text-align: left; font-weight: normal; padding: 0.2em 0.5em; border-top: 1px dotted #fa0; }
#logmsg table td { text-align: right; border-top: 1px dotted #fa0; padding: 0.2em 0.5em; }
#logmsg table thead th { text-align: center; border-bottom: 1px solid #fa0; }
#logmsg table th.Corner { text-align: left; }
#logmsg hr { border: none 0; border-top: 2px dashed #fa0; height: 1px; }
#header, #footer { color: #fff; background: #636; border: 1px #300 solid; padding: 6px; }
#patch { width: 100%; }
#patch h4 {font-family: verdana,arial,helvetica,sans-serif;font-size:10pt;padding:8px;background:#369;color:#fff;margin:0;}
#patch .propset h4, #patch .binary h4 {margin:0;}
#patch pre {padding:0;line-height:1.2em;margin:0;}
#patch .diff {width:100%;background:#eee;padding: 0 0 10px 0;overflow:auto;}
#patch .propset .diff, #patch .binary .diff {padding:10px 0;}
#patch span {display:block;padding:0 10px;}
#patch .modfile, #patch .addfile, #patch .delfile, #patch .propset, #patch .binary, #patch .copfile {border:1px solid #ccc;margin:10px 0;}
#patch ins {background:#dfd;text-decoration:none;display:block;padding:0 10px;}
#patch del {background:#fdd;text-decoration:none;display:block;padding:0 10px;}
#patch .lines, .info {color:#888;background:#fff;}
--></style>
<div id="msg">
<dl class="meta">
<dt>Revision</dt> <dd>60</dd>
<dt>Author</dt> <dd>nanardon</dd>
<dt>Date</dt> <dd>2010-10-29 01:59:20 +0200 (Fri, 29 Oct 2010)</dd>
</dl>
<h3>Log Message</h3>
<pre>- add login management to postgresql</pre>
<h3>Modified Paths</h3>
<ul>
<li><a href="#puppetmodulespostgresqlmanifestsinitpp">puppet/modules/postgresql/manifests/init.pp</a></li>
<li><a href="#puppetmodulespostgresqltemplatespg_hbaconf">puppet/modules/postgresql/templates/pg_hba.conf</a></li>
<li><a href="#puppetmodulespostgresqltemplatespostgresqlconf">puppet/modules/postgresql/templates/postgresql.conf</a></li>
</ul>
<h3>Added Paths</h3>
<ul>
<li><a href="#puppetmodulespostgresqltemplatespam">puppet/modules/postgresql/templates/pam</a></li>
</ul>
</div>
<div id="patch">
<h3>Diff</h3>
<a id="puppetmodulespostgresqlmanifestsinitpp"></a>
<div class="modfile"><h4>Modified: puppet/modules/postgresql/manifests/init.pp (59 => 60)</h4>
<pre class="diff"><span>
<span class="info">--- puppet/modules/postgresql/manifests/init.pp 2010-10-28 23:51:17 UTC (rev 59)
+++ puppet/modules/postgresql/manifests/init.pp 2010-10-28 23:59:20 UTC (rev 60)
</span><span class="lines">@@ -7,11 +7,19 @@
</span><span class="cx"> restart => "/etc/rc.d/init.d/postgresql reload"
</span><span class="cx"> }
</span><span class="cx">
</span><ins>+ file { '/etc/pam.d/postgresql':
+ ensure => present,
+ owner => root,
+ group => root,
+ mode => 644,
+ content => template("postgresql/pam"),
+ }
+
</ins><span class="cx"> file { '/var/lib/pgsql/data/postgresql.conf':
</span><span class="cx"> ensure => present,
</span><span class="cx"> owner => postgres,
</span><span class="cx"> group => postgres,
</span><del>- mode => 644,
</del><ins>+ mode => 600,
</ins><span class="cx"> content => template("postgresql/postgresql.conf"),
</span><span class="cx"> require => Package["postgresql9.0-server"],
</span><span class="cx"> notify => [Service['postgresql']]
</span><span class="lines">@@ -21,7 +29,7 @@
</span><span class="cx"> ensure => present,
</span><span class="cx"> owner => postgres,
</span><span class="cx"> group => postgres,
</span><del>- mode => 644,
</del><ins>+ mode => 600,
</ins><span class="cx"> content => template("postgresql/pg_hba.conf"),
</span><span class="cx"> require => Package["postgresql9.0-server"],
</span><span class="cx"> notify => [Service['postgresql']]
</span></span></pre></div>
<a id="puppetmodulespostgresqltemplatespam"></a>
<div class="addfile"><h4>Added: puppet/modules/postgresql/templates/pam (0 => 60)</h4>
<pre class="diff"><span>
<span class="info">--- puppet/modules/postgresql/templates/pam (rev 0)
+++ puppet/modules/postgresql/templates/pam 2010-10-28 23:59:20 UTC (rev 60)
</span><span class="lines">@@ -0,0 +1,5 @@
</span><ins>+#%PAM-1.0
+auth include system-auth
+account include system-auth
+password include system-auth
+session include system-auth
</ins></span></pre></div>
<a id="puppetmodulespostgresqltemplatespg_hbaconf"></a>
<div class="modfile"><h4>Modified: puppet/modules/postgresql/templates/pg_hba.conf (59 => 60)</h4>
<pre class="diff"><span>
<span class="info">--- puppet/modules/postgresql/templates/pg_hba.conf 2010-10-28 23:51:17 UTC (rev 59)
+++ puppet/modules/postgresql/templates/pg_hba.conf 2010-10-28 23:59:20 UTC (rev 60)
</span><span class="lines">@@ -77,8 +77,11 @@
</span><span class="cx"> # TYPE DATABASE USER CIDR-ADDRESS METHOD
</span><span class="cx">
</span><span class="cx"> # "local" is for Unix domain socket connections only
</span><del>-local all all trust
</del><ins>+local all all ident
</ins><span class="cx"> # IPv4 local connections:
</span><del>-host all all 127.0.0.1/32 trust
</del><ins>+host all all 127.0.0.1/32 pam
</ins><span class="cx"> # IPv6 local connections:
</span><del>-host all all ::1/128 trust
</del><ins>+host all all ::1/128 pam
+
+host all all 0.0.0.0/0 pam
+host all all ::0/0 pam
</ins></span></pre></div>
<a id="puppetmodulespostgresqltemplatespostgresqlconf"></a>
<div class="modfile"><h4>Modified: puppet/modules/postgresql/templates/postgresql.conf (59 => 60)</h4>
<pre class="diff"><span>
<span class="info">--- puppet/modules/postgresql/templates/postgresql.conf 2010-10-28 23:51:17 UTC (rev 59)
+++ puppet/modules/postgresql/templates/postgresql.conf 2010-10-28 23:59:20 UTC (rev 60)
</span><span class="lines">@@ -57,6 +57,7 @@
</span><span class="cx"> # - Connection Settings -
</span><span class="cx">
</span><span class="cx"> #listen_addresses = 'localhost' # what IP address(es) to listen on;
</span><ins>+listen_addresses = *
</ins><span class="cx"> # comma-separated list of addresses;
</span><span class="cx"> # defaults to 'localhost', '*' = all
</span><span class="cx"> # (change requires restart)
</span><span class="lines">@@ -73,6 +74,7 @@
</span><span class="cx"> # (change requires restart)
</span><span class="cx"> #bonjour_name = '' # defaults to the computer name
</span><span class="cx"> # (change requires restart)
</span><ins>+bonjour_name = 'Magiea\'s Postgresql server'
</ins><span class="cx">
</span><span class="cx"> # - Security and Authentication -
</span><span class="cx">
</span></span></pre>
</div>
</div>
</body>
</html>
|
