Re: Proposal: allow non-masked IPs inside of pg_hba.conf

2025-02-11 Thread Greg Sabino Mullane
> > This too would work better if hba.c were sharing cidr_in's logic: +1, a two-for-one solution. Cheers, Greg -- Crunchy Data - https://www.crunchydata.com Enterprise Postgres Software Products & Tech Support

Re: Proposal: allow non-masked IPs inside of pg_hba.conf

2025-02-11 Thread Tom Lane
Greg Sabino Mullane writes: > Currently, all IP addresses in the address field of records in the > pg_hba.conf file require a CIDR mask. > ... > I'd like to relax that requirement, such that a lack of an explicit mask > defaults to a /32 mask, allowing that first example to work as most people > w

Proposal: allow non-masked IPs inside of pg_hba.conf

2025-02-11 Thread Greg Sabino Mullane
Currently, all IP addresses in the address field of records in the pg_hba.conf file require a CIDR mask. This means that rather than the intuitive way to add a single IP address: host postgres alice 10.128.0.10 scram-sha-256 One must do: host postgres alice 10.128.0.10/32 scram-sha-256 I'd li