Don't hard-code postgres user's username for pg_hba

This commit is contained in:
Chris Price 2013-06-06 12:55:43 -07:00
parent ee8643221b
commit 8502de54a7

View file

@ -63,7 +63,7 @@ class postgresql::config::beforeservice(
# Lets setup the base rules # Lets setup the base rules
postgresql::pg_hba_rule { 'local access as postgres user': postgresql::pg_hba_rule { 'local access as postgres user':
type => 'local', type => 'local',
user => 'postgres', user => $postgresql::params::user,
auth_method => 'ident', auth_method => 'ident',
auth_option => $postgresql::params::version ? { auth_option => $postgresql::params::version ? {
'8.1' => 'sameuser', '8.1' => 'sameuser',
@ -82,7 +82,7 @@ class postgresql::config::beforeservice(
} }
postgresql::pg_hba_rule { 'deny access to postgresql user': postgresql::pg_hba_rule { 'deny access to postgresql user':
type => 'host', type => 'host',
user => 'postgres', user => $postgresql::params::user,
address => $ip_mask_deny_postgres_user, address => $ip_mask_deny_postgres_user,
auth_method => 'reject', auth_method => 'reject',
order => '003', order => '003',