<div dir="ltr"><div dir="ltr">Thanks David,<div><br></div><div><p>I tested the configuration by setting <code>allow_clear_text_frontend_auth = on</code> and disabling the pool_hba. I made the corresponding entry in the <code>pg_hba.conf</code> file. However, while connecting through the database port (5432), it prompts for the password, but when connecting through Pgpool (port 9999), it does not ask for a password.</p><p>Here is the content of <code>pg_hba.conf</code>:</p><pre class="gmail-!overflow-visible"><div class="gmail-contain-inline-size gmail-rounded-md gmail-border-[0.5px] gmail-border-token-border-medium gmail-relative gmail-bg-token-sidebar-surface-primary gmail-dark:bg-gray-950"><div class="gmail-flex gmail-items-center gmail-text-token-text-secondary gmail-px-4 gmail-py-2 gmail-text-xs gmail-font-sans gmail-justify-between gmail-rounded-t-md gmail-h-9 gmail-bg-token-sidebar-surface-primary gmail-dark:bg-token-main-surface-secondary gmail-select-none">bash</div><div class="gmail-sticky gmail-top-9 gmail-md:top-[5.75rem]"><div class="gmail-absolute gmail-bottom-0 gmail-right-2 gmail-flex gmail-h-9 gmail-items-center"><div class="gmail-flex gmail-items-center gmail-rounded gmail-bg-token-sidebar-surface-primary gmail-px-2 gmail-font-sans gmail-text-xs gmail-text-token-text-secondary gmail-dark:bg-token-main-surface-secondary"><span class="gmail-"><button class="gmail-flex gmail-gap-1 gmail-items-center gmail-select-none gmail-py-1" aria-label="Copy">Copy code</button></span></div></div></div><div class="gmail-overflow-y-auto gmail-p-4" dir="ltr"><code class="gmail-!whitespace-pre gmail-hljs gmail-language-bash"><span class="gmail-hljs-comment"># TYPE DATABASE USER ADDRESS METHOD</span>
<span class="gmail-hljs-comment"># "local" is for Unix domain socket connections only</span>
<span class="gmail-hljs-built_in">local</span> all all trust
<span class="gmail-hljs-comment"># IPv4 local connections:</span>
host all all <a href="http://127.0.0.1/32">127.0.0.1/32</a> trust
<span class="gmail-hljs-comment"># IPv6 local connections:</span>
host all all ::1/128 trust
<span class="gmail-hljs-comment"># Allow replication connections from localhost, by a user with the</span>
<span class="gmail-hljs-comment"># replication privilege.</span>
<span class="gmail-hljs-built_in">local</span> replication all trust
host replication all <a href="http://127.0.0.1/32">127.0.0.1/32</a> trust
host replication all ::1/128 trust
host repmgr repmgr <a href="http://127.0.0.1/32">127.0.0.1/32</a> trust
host repmgr repmgr <a href="http://10.125.0.90/32">10.125.0.90/32</a> trust <span class="gmail-hljs-comment"># Primary</span>
host replication repmgr <a href="http://10.125.0.90/32">10.125.0.90/32</a> trust
host repmgr repmgr <a href="http://10.125.0.91/32">10.125.0.91/32</a> trust <span class="gmail-hljs-comment"># Standby</span>
host replication repmgr <a href="http://10.125.0.91/32">10.125.0.91/32</a> trust
host all all <a href="http://10.125.0.90/32">10.125.0.90/32</a> trust <span class="gmail-hljs-comment"># Node 1</span>
host all all <a href="http://10.125.0.91/32">10.125.0.91/32</a> trust <span class="gmail-hljs-comment"># Node 2</span>
<span class="gmail-hljs-comment">#host all all <a href="http://0.0.0.0/26">0.0.0.0/26</a> trust</span>
host all all <a href="http://10.125.0.79/32">10.125.0.79/32</a> scram-sha-256
host all all <a href="http://0.0.0.0/0">0.0.0.0/0</a> scram-sha-256
</code></div></div></pre><p>When I connect via the database port (5432), it prompts for the password as expected:</p><pre class="gmail-!overflow-visible"><div class="gmail-contain-inline-size gmail-rounded-md gmail-border-[0.5px] gmail-border-token-border-medium gmail-relative gmail-bg-token-sidebar-surface-primary gmail-dark:bg-gray-950"><div class="gmail-overflow-y-auto gmail-p-4" dir="ltr"><code class="gmail-!whitespace-pre gmail-hljs gmail-language-bash">[postgres@scrbtrheldbaas002 ~]$ psql -h 10.125.0.79 -U vkp -d postgres -p 5432
Password <span class="gmail-hljs-keyword">for</span> user vkp:
psql (15.3)
Type <span class="gmail-hljs-string">"help"</span> <span class="gmail-hljs-keyword">for</span> <span class="gmail-hljs-built_in">help</span>.
postgres=>
postgres=>
postgres=> <span class="gmail-hljs-built_in">exit</span>
</code></div></div></pre><p>However, when connecting through Pgpool (port 9999), it does not prompt for the password:</p><pre class="gmail-!overflow-visible"><div class="gmail-contain-inline-size gmail-rounded-md gmail-border-[0.5px] gmail-border-token-border-medium gmail-relative gmail-bg-token-sidebar-surface-primary gmail-dark:bg-gray-950"><div class="gmail-flex gmail-items-center gmail-text-token-text-secondary gmail-px-4 gmail-py-2 gmail-text-xs gmail-font-sans gmail-justify-between gmail-rounded-t-md gmail-h-9 gmail-bg-token-sidebar-surface-primary gmail-dark:bg-token-main-surface-secondary gmail-select-none"><span style="font-family:Arial,Helvetica,sans-serif">[postgres@scrbtrheldbaas002 ~]$ psql -h 10.125.0.79 -U vkp -d postgres -p 9999</span></div><div class="gmail-overflow-y-auto gmail-p-4" dir="ltr"><code class="gmail-!whitespace-pre gmail-hljs gmail-language-bash">psql (15.3)
Type <span class="gmail-hljs-string">"help"</span> <span class="gmail-hljs-keyword">for</span> <span class="gmail-hljs-built_in">help</span>.
postgres=>
</code></div></div></pre><p>This behavior might be related to how Pgpool handles authentication. Let me know if you need further investigation or configuration changes!</p><p>Thanks</p><p>Vijay</p></div></div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Thu, Jan 9, 2025 at 10:47 AM David G. Johnston <<a href="mailto:david.g.johnston@gmail.com">david.g.johnston@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Wednesday, January 8, 2025, vijay patil <<a href="mailto:vijay.postgres@gmail.com" target="_blank">vijay.postgres@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Could you please advise how I can achieve password authentication without using the <code>pool_password</code> file, while ensuring that Pgpool prompts for the password during connection?<br></div></div></div></div></div></blockquote><div><br></div><div><a href="https://www.pgpool.net/docs/latest/en/html/runtime-config-connection.html#GUC-ALLOW-CLEAR-TEXT-FRONTEND-AUTH" target="_blank">https://www.pgpool.net/docs/latest/en/html/runtime-config-connection.html#GUC-ALLOW-CLEAR-TEXT-FRONTEND-AUTH</a><br></div><div><br></div><div>David J.</div>
</blockquote></div>