[pgpool-hackers: 3386] Re: allow_clear_text_frontend_auth sometimes does not work

[Tatsuo Ishii]

Thank you Usama.

Your fix works great!

BTW, I have changed around line 1035:

			ereport(DEBUG,
				(errmsg("using clear text authentication with frontend"),
					 errdetail("backend is using password authentication")));

"DEBUG" to "DEBUG1".

Best regards,
--
Tatsuo Ishii
SRA OSS, Inc. Japan
English: http://www.sraoss.co.jp/index_en.php
Japanese:http://www.sraoss.co.jp

From: Muhammad Usama <m.usama at gmail.com>
Subject: Re: allow_clear_text_frontend_auth sometimes does not work
Date: Fri, 16 Aug 2019 18:57:21 +0500
Message-ID: <CAEJvTzX0MZ7TCd7nsyvWc9PSpXn24tjGGNckD7vi-2bj35HkUQ at mail.gmail.com>

> Hi Ishii-San
> 
> Can you please try the attached fix if it works.
> 
> Thanks
> Best Regards
> Muhammad Usama
> 
> 
> 
> 
> On Fri, Aug 9, 2019 at 11:26 AM Muhammad Usama <m.usama at gmail.com> wrote:
> 
>> Hi Ishii-San
>>
>> I am looking into this one.
>>
>> Thanks
>> Best Regards
>> Muhammad Usama
>>
>> On Fri, Aug 9, 2019 at 8:34 AM Tatsuo Ishii <ishii at sraoss.co.jp> wrote:
>>
>>> Hi Usama,
>>>
>>> While investigating:
>>>
>>> https://www.pgpool.net/mantisbt/view.php?id=534
>>>
>>> I think there might be a issue with allow_clear_text_frontend_auth in
>>> certain case.
>>>
>>> 1) allow_clear_text_frontend_auth = on
>>> 2) user set md5 password in PostgreSQL
>>> 3) user set "password", instead of "md5" in pg_hba.conf
>>>
>>> If all the conditions above are met, Pgpool-II always fails with
>>> authentication.
>>>
>>> 2019-08-06 13:57:45: pid 16823: FATAL: clear text password authentication
>>> failed
>>> 2019-08-06 13:57:45: pid 16823: DETAIL: unable to get the password for
>>> user: "postgres"
>>> 2019-08-06 13:57:45: pid 16823: LOCATION: pool_auth.c:1018
>>> 2019-08-06 13:57:45: pid 16823: DEBUG: pool_write: to frontend: kind:E
>>> po:0
>>> 2019-08-06 13:57:45: pid 16823: LOCATION: pool_stream.c:461
>>>
>>> The setting is above is valid and in fact if directly connecting to
>>> PostgreSQL, auth succeeds.
>>>
>>> Best regards,
>>> --
>>> Tatsuo Ishii
>>> SRA OSS, Inc. Japan
>>> English: http://www.sraoss.co.jp/index_en.php
>>> Japanese:http://www.sraoss.co.jp
>>>
>>