4.4.5 PostgreSQL network configuration

By default, access to the PostgreSQL database engine is restricted to the local system (the system where the database is installed) and no remote access via network is possible. If the sat-nms MNC system is a all-in-one installation this default configuration is sufficient and you can skip this chapter.

For a distributed MNC installation network access from a different host must be possible. Usually the database runs on the central server and the connected MNC servers needs to access the database via network.

• login as root
• edit the file /etc/postgresql/15/main/pg_hba.conf
  • if a different version of PostgreSQL is installed replace 15 with the version number
  • add a line at the end of the file with host all all [local-net] md5
    • where [local-net] is the network from where you want to connect e.g 192.168.2.0/24
• edit file /etc/postgresql/15/main/postgresql.conf
  • uncomment and change line to: listen_addresses = '*'
• restart PostgreSQL: systemctl restart postgresql

example from pg_hba.conf

# allow access for two additional networks
host    all             all             172.17.1.0/16           md5
host    all             all             192.168.1.0/24          md5

example from postgresql.conf

# - Connection Settings -
listen_addresses = '*'   # what IP address(es) to listen on;
port = 5432              # (change requires restart)

You can test the network configuration with from any other system with an installed psql tool, or even on the local system if you specify the IP address of your PostgreSQL server:

• login as user satnms
• test connection: psql --host [server-ip-address]

example output

satnms@satnms7-dev:/etc/postgresql/15/main$ psql --host 192.168.2.231
Password for user satnms:
psql (15.10 (Debian 15.10-0+deb12u1))
SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, compression: off)
Type "help" for help.
satnms=>