[pgpool-general: 8611] FW: PGPOOL SSL setup Issues

[Abhishek 1. Garg (Nokia)]

Unable to share certificates, so sending just .conf files.

-----Original Message-----
From: Abhishek 1. Garg (Nokia) 
Sent: Wednesday, February 22, 2023 1:34 PM
To: Bo Peng <pengbo at sraoss.co.jp>
Cc: pgpool-general at pgpool.net; Srikant Sharma (Nokia) <srikant.sharma at nokia.com>
Subject: RE: [pgpool-general: 8603] PGPOOL SSL setup Issues

Hello,

Please refer attached files. Our Postgres DB is ssl enabled so attaching certificates as well.
And we want to achieve PGPOOL with SSL connectivity to Postgres with SSL, using same certificates as attached.

Regards

-----Original Message-----
From: Bo Peng <pengbo at sraoss.co.jp>
Sent: Wednesday, February 22, 2023 7:47 AM
To: Abhishek 1. Garg (Nokia) <abhishek.1.garg at nokia.com>
Cc: pgpool-general at pgpool.net; Srikant Sharma (Nokia) <srikant.sharma at nokia.com>
Subject: Re: [pgpool-general: 8603] PGPOOL SSL setup Issues

[You don't often get email from pengbo at sraoss.co.jp. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]

CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See http://nok.it/ext for additional information.



Hello,

Thank you for sharing the configurations.

> > 2023-02-15 13:51:38.201: main pid 46946: LOG:  find_primary_node: 
> > make_persistent_db_connection_noerror failed on node 1

I think the pool_hba.conf doesn't cause the error above because it is the error between pgpool and postgresql.

Cloud you share your postgresql.conf and pg_hba.conf?

On Mon, 20 Feb 2023 04:19:53 +0000
"Abhishek 1. Garg (Nokia)" <abhishek.1.garg at nokia.com> wrote:

> Below are the details
>
>
>
> root at sr-vm-abh-1:/etc/pgpool2# cat pool_passwd
>
> pgpool:TEXTpgpool
>
> postgres:TEXTpostgres
>
> root at sr-vm-abh-1:/etc/pgpool2# pwd
>
> /etc/pgpool2
>
> root at sr-vm-abh-1:/etc/pgpool2#
>
>
>
> -----Original Message-----
> From: Bo Peng <pengbo at sraoss.co.jp>
> Sent: Friday, February 17, 2023 5:53 PM
> To: Abhishek 1. Garg (Nokia) <abhishek.1.garg at nokia.com>
> Cc: pgpool-general at pgpool.net; Srikant Sharma (Nokia) 
> <srikant.sharma at nokia.com>
> Subject: Re: [pgpool-general: 8603] PGPOOL SSL setup Issues
>
>
>
> [You don't often get email from
> pengbo at sraoss.co.jp<mailto:pengbo at sraoss.co.jp>. Learn why this is 
> important at https://aka.ms/LearnAboutSenderIdentification ]
>
>
>
> Hi,
>
>
>
> > Error:
>
> > 2023-02-15 13:51:38.201: main pid 46946: LOG:  find_primary_node: 
> > make_persistent_db_connection_noerror failed on node 1
>
>
>
> Pgpool-II uses the user specified in "sr_check_user" to fine the primary node.
>
> Because sr_check_password is empty, Pgpool-II will read the password from pool_passwd file.
>
> Please check if you have set the password correctly in pool_passwd file?
>
>
>
> -------------------------
>
> sr_check_user = 'pgpool'
>
> sr_check_password = ''
>
> -------------------------
>
>
>
> On Wed, 15 Feb 2023 09:12:52 +0000
>
> "Abhishek 1. Garg (Nokia)" <abhishek.1.garg at nokia.com<mailto:abhishek.1.garg at nokia.com>> wrote:
>
>
>
> > Hi Team,
>
> >
>
> > We are facing challenges in our Sandbox environment where we are trying to configure 2 PGPOOL nodes with 2 PostgreSQL servers(with Standby Replication).
>
> > Refer attached conf file and logs.
>
> >
>
> > Error:
>
> > 2023-02-15 13:51:38.201: main pid 46946: LOG:  find_primary_node: 
> > make_persistent_db_connection_noerror failed on node 1
>
> >
>
> > Can you please suggest?
>
> >
>
> > P.S. -     This setup works fine when pool_hba.conf is updated with below entries, result shown below
>
> > hostssl all         all         0.0.0.0/0             trust
>
> >
>
> > [cid:image001.png at 01D9414B.C5876E00]
>
> >
>
> > Regards
>
> > Abhishek Garg
>
>
>
>
>
> --
>
> Bo Peng <pengbo at sraoss.co.jp<mailto:pengbo at sraoss.co.jp>>
>
> SRA OSS LLC
>
> https://www.sraoss.co.jp/


--
Bo Peng <pengbo at sraoss.co.jp>
SRA OSS LLC
https://www.sraoss.co.jp/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pg_hba.conf
Type: application/octet-stream
Size: 5533 bytes
Desc: pg_hba.conf
URL: <http://www.pgpool.net/pipermail/pgpool-general/attachments/20230222/5af73022/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: postgresql.conf
Type: application/octet-stream
Size: 27200 bytes
Desc: postgresql.conf
URL: <http://www.pgpool.net/pipermail/pgpool-general/attachments/20230222/5af73022/attachment-0001.obj>