Discussion:
[ADMIN] synchronous_standby_name format
John Scalia
2017-07-14 14:58:48 UTC
Permalink
Hi all,

I've been asked to make our setup a little more secure. So, I thought I
would restrict which servers could replicate from our primary. However, it
does not appear that 9.6.3 can use a FQDN entry for this parameter. Plus,
our hostnames include "-" characters, and that seems to break the system as
well. Shouldn't synchronous_standby_names accept a FQDN with a dot or a
dash in the hostname or is this maybe a bug? (Flame suit on)
--
Jay
Ashish Tiwari
2017-07-14 15:36:10 UTC
Permalink
Hi John,

Please refer the below links . This may help you.
https://googleweblight.com/i?u=https://www.postgresql.org/docs/9.3/static/auth-pg-hba-conf.html&grqid=FSXUA_9A&hl=en-IN

Thanks.
Post by John Scalia
Hi all,
I've been asked to make our setup a little more secure. So, I thought I
would restrict which servers could replicate from our primary. However, it
does not appear that 9.6.3 can use a FQDN entry for this parameter. Plus,
our hostnames include "-" characters, and that seems to break the system as
well. Shouldn't synchronous_standby_names accept a FQDN with a dot or a
dash in the hostname or is this maybe a bug? (Flame suit on)
--
Jay
Jerry Sievers
2017-07-14 15:56:33 UTC
Permalink
Hi all, 
I've been asked to make our setup a little more secure. So, I thought
I would restrict which servers could replicate from our primary.
However, it does not appear that 9.6.3 can use a FQDN entry for this
parameter. Plus, our hostnames include "-" characters, and that seems
to break the system as well. Shouldn't synchronous_standby_names
accept a FQDN with a dot or a dash in the hostname or is this maybe a
bug? (Flame suit on)
HBA file is where you restrict access based on IP/netmask or DNS names.

synchronous_standby_names has nothing whatsoever to do with this.

HTH
--
Jay
--
Jerry Sievers
Postgres DBA/Development Consulting
e: ***@comcast.net
p: 312.241.7800
--
Sent via pgsql-admin mailing list (pgsql-***@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
John Scalia
2017-07-14 16:34:56 UTC
Permalink
Sorry, I should have better explained this. I was trying to build the
application_name using the server's FQDN, and yes, I tried various forms of
quoting the name to no avail. The real issue here though arose from trying
to configure this using ansible. I was just trying to add a new replica
using a new plaubook without defining a lot a variables.
Post by Jerry Sievers
Post by John Scalia
Hi all,
I've been asked to make our setup a little more secure. So, I thought
I would restrict which servers could replicate from our primary.
However, it does not appear that 9.6.3 can use a FQDN entry for this
parameter. Plus, our hostnames include "-" characters, and that seems
to break the system as well. Shouldn't synchronous_standby_names
accept a FQDN with a dot or a dash in the hostname or is this maybe a
bug? (Flame suit on)
HBA file is where you restrict access based on IP/netmask or DNS names.
synchronous_standby_names has nothing whatsoever to do with this.
HTH
Post by John Scalia
--
Jay
--
Jerry Sievers
Postgres DBA/Development Consulting
p: 312.241.7800
Loading...