[pgpool-hackers: 3383] Re: allow_clear_text_frontend_auth sometimes does not work

[Muhammad Usama]

Hi Ishii-San

Can you please try the attached fix if it works.

Thanks
Best Regards
Muhammad Usama




On Fri, Aug 9, 2019 at 11:26 AM Muhammad Usama <m.usama at gmail.com> wrote:

> Hi Ishii-San
>
> I am looking into this one.
>
> Thanks
> Best Regards
> Muhammad Usama
>
> On Fri, Aug 9, 2019 at 8:34 AM Tatsuo Ishii <ishii at sraoss.co.jp> wrote:
>
>> Hi Usama,
>>
>> While investigating:
>>
>> https://www.pgpool.net/mantisbt/view.php?id=534
>>
>> I think there might be a issue with allow_clear_text_frontend_auth in
>> certain case.
>>
>> 1) allow_clear_text_frontend_auth = on
>> 2) user set md5 password in PostgreSQL
>> 3) user set "password", instead of "md5" in pg_hba.conf
>>
>> If all the conditions above are met, Pgpool-II always fails with
>> authentication.
>>
>> 2019-08-06 13:57:45: pid 16823: FATAL: clear text password authentication
>> failed
>> 2019-08-06 13:57:45: pid 16823: DETAIL: unable to get the password for
>> user: "postgres"
>> 2019-08-06 13:57:45: pid 16823: LOCATION: pool_auth.c:1018
>> 2019-08-06 13:57:45: pid 16823: DEBUG: pool_write: to frontend: kind:E
>> po:0
>> 2019-08-06 13:57:45: pid 16823: LOCATION: pool_stream.c:461
>>
>> The setting is above is valid and in fact if directly connecting to
>> PostgreSQL, auth succeeds.
>>
>> Best regards,
>> --
>> Tatsuo Ishii
>> SRA OSS, Inc. Japan
>> English: http://www.sraoss.co.jp/index_en.php
>> Japanese:http://www.sraoss.co.jp
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.sraoss.jp/pipermail/pgpool-hackers/attachments/20190816/778a1c4a/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: clear_text_auth_fix.diff
Type: application/octet-stream
Size: 1497 bytes
Desc: not available
URL: <http://www.sraoss.jp/pipermail/pgpool-hackers/attachments/20190816/778a1c4a/attachment.obj>