[pgpool-general: 9191] Re: reloading of pool_passwd file

[michail alexakis]

Hello Tatsuo,

Yes, my test is as follows (on Pgpool 4.4.6, running on a RedHat 8
container [1]).

The pool_passwd file is located at a custom path:
$ grep /etc/pgpool-II/pgpool.conf -P -e 'pool_passwd\s*='
pool_passwd = '/var/lib/pgpool/pool-passwd/pool_passwd'

Create a list of new users to feed pg_enc utility:
$ echo 'user1:secret1' > /tmp/new-users.txt
$  pg_enc -k $PGPOOLKEYFILE -i /tmp/new-users.txt -m # writes entries to
/etc/pgpool-II/pool_passwd

Append new entries (assuming /etc/pgpool-II/pool_passwd was initially
empty) to our custom pool_passwd (contents change, inode of target remains
the same):
$ cat /etc/pgpool-II/pool_passwd >> /var/lib/pgpool/pool-passwd/pool_passwd

Connect with new user "user1" (it works, without reloading).

[1]
https://github.com/OpertusMundi/postgresql-cluster.helm/blob/master/pgpool/redhat/Dockerfile

Kind regards, Michail


On Mon, Aug 19, 2024 at 12:14 PM Tatsuo Ishii <ishii at postgresql.org> wrote:

> > Hello Tatsuo and thanks for your quick response!
> >
> > My impression is that (as Ron also mentioned) the contents of pool_passwd
> > are read on every connection (authentication) attempt. I mean, at least
> for
> > a handful of tests I performed, the new users were seen without a need
> for
> > a reload (but this could also be luck[1]). So, is a reload really
> necessary
> > here?
> >
> > [1] e.g some Pgpool child processes see the updated version of
> pool_passwd,
> > while others see the old (cached?) one
>
> I confirmed using gdb that without pgpool reload, pool_passwd is never
> re-read at least on master branch. Are you sure that you are the only
> user of pgpool at that point? I suspect someone else executed pgpool
> reload.
>
> Best reagards,
> --
> Tatsuo Ishii
> SRA OSS K.K.
> English: http://www.sraoss.co.jp/index_en/
> Japanese:http://www.sraoss.co.jp
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pgpool.net/pipermail/pgpool-general/attachments/20240819/5c48c97f/attachment.htm>