[pgpool-general: 7920] Re: Problem using password authentication
Jon SCHEWE
jon.schewe at raytheon.com
Thu Dec 9 00:24:05 JST 2021
> > I'm using password authentication over SSL. This works fine with connections from the same network, but doesn't work with connections from another network. Can anyone explain why this isn't working?
> >
> > in pgpool.conf:
> > enable_pool_hba = on
> > pool_passwd = ''
> >
> >
> > in pool_hba.conf:
> > # "local" is for Unix domain socket connections only
> > local all all trust
> > # IPv4 local connections:
> > host all all 127.0.0.1/32 trust
> > host all all ::1/128 trust
> >
> > hostssl all all 0.0.0.0/0 password
> >
> > log output:
> > Dec 7 16:20:59 psql-01 pgpool[1085857]: 2021-12-07 16:20:59: pid 1102488: WARNING: unable to get password, password file descriptor is NULL
> > Dec 7 16:20:59 psql-01 pgpool[1085857]: 2021-12-07 16:20:59: pid 1102488: FATAL: client authentication failed
> > Dec 7 16:20:59 psql-01 pgpool[1085857]: 2021-12-07 16:20:59: pid 1102488: DETAIL: no pool_hba.conf entry for host "XXX.XXX.XXX.XXX", user "", database "", SSL off
>
> I am wondering why the "user" and "database" are blank.
> Can you connect to PostgreSQL from another network?
Our firewall limits access to PostgreSQL from other networks to prevent applications from connecting to the individual instances rather than pgpool.
My pg_hba.conf for PostgreSQL limits connections to the pgpool hosts. In this case the pgpool virtual IP is 192.1.213.40 and the 3 hosts are allowed to connect to PostgreSQL directly.
hostssl all all 192.1.213.41/32 password
hostssl all all 192.1.213.42/32 password
hostssl all all 192.1.213.43/32 password
More information about the pgpool-general
mailing list