[pgpool-hackers: 3389] Re: allow_clear_text_frontend_auth sometimes does not work

[Muhammad Usama]

Hi Ishii-San

Thanks for confirming the fix. I have committed the patch in master and 4.1
branches after making the suggested change.

Best regards
Muhammad Usama


On Sat, Aug 17, 2019 at 6:19 AM Tatsuo Ishii <ishii at sraoss.co.jp> wrote:

> Thank you Usama.
>
> Your fix works great!
>
> BTW, I have changed around line 1035:
>
>                         ereport(DEBUG,
>                                 (errmsg("using clear text authentication
> with frontend"),
>                                          errdetail("backend is using
> password authentication")));
>
> "DEBUG" to "DEBUG1".
>
> Best regards,
> --
> Tatsuo Ishii
> SRA OSS, Inc. Japan
> English: http://www.sraoss.co.jp/index_en.php
> Japanese:http://www.sraoss.co.jp
>
> From: Muhammad Usama <m.usama at gmail.com>
> Subject: Re: allow_clear_text_frontend_auth sometimes does not work
> Date: Fri, 16 Aug 2019 18:57:21 +0500
> Message-ID: <
> CAEJvTzX0MZ7TCd7nsyvWc9PSpXn24tjGGNckD7vi-2bj35HkUQ at mail.gmail.com>
>
> > Hi Ishii-San
> >
> > Can you please try the attached fix if it works.
> >
> > Thanks
> > Best Regards
> > Muhammad Usama
> >
> >
> >
> >
> > On Fri, Aug 9, 2019 at 11:26 AM Muhammad Usama <m.usama at gmail.com>
> wrote:
> >
> >> Hi Ishii-San
> >>
> >> I am looking into this one.
> >>
> >> Thanks
> >> Best Regards
> >> Muhammad Usama
> >>
> >> On Fri, Aug 9, 2019 at 8:34 AM Tatsuo Ishii <ishii at sraoss.co.jp> wrote:
> >>
> >>> Hi Usama,
> >>>
> >>> While investigating:
> >>>
> >>> https://www.pgpool.net/mantisbt/view.php?id=534
> >>>
> >>> I think there might be a issue with allow_clear_text_frontend_auth in
> >>> certain case.
> >>>
> >>> 1) allow_clear_text_frontend_auth = on
> >>> 2) user set md5 password in PostgreSQL
> >>> 3) user set "password", instead of "md5" in pg_hba.conf
> >>>
> >>> If all the conditions above are met, Pgpool-II always fails with
> >>> authentication.
> >>>
> >>> 2019-08-06 13:57:45: pid 16823: FATAL: clear text password
> authentication
> >>> failed
> >>> 2019-08-06 13:57:45: pid 16823: DETAIL: unable to get the password for
> >>> user: "postgres"
> >>> 2019-08-06 13:57:45: pid 16823: LOCATION: pool_auth.c:1018
> >>> 2019-08-06 13:57:45: pid 16823: DEBUG: pool_write: to frontend: kind:E
> >>> po:0
> >>> 2019-08-06 13:57:45: pid 16823: LOCATION: pool_stream.c:461
> >>>
> >>> The setting is above is valid and in fact if directly connecting to
> >>> PostgreSQL, auth succeeds.
> >>>
> >>> Best regards,
> >>> --
> >>> Tatsuo Ishii
> >>> SRA OSS, Inc. Japan
> >>> English: http://www.sraoss.co.jp/index_en.php
> >>> Japanese:http://www.sraoss.co.jp
> >>>
> >>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.sraoss.jp/pipermail/pgpool-hackers/attachments/20190819/13bdfc2c/attachment.html>