Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pNFJq-0007wj-Nv for pgsql-admin@arkaria.postgresql.org; Wed, 01 Feb 2023 15:46:42 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1pNFJp-0006XE-By for pgsql-admin@arkaria.postgresql.org; Wed, 01 Feb 2023 15:46:41 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pNFJp-0006WJ-13 for pgsql-admin@lists.postgresql.org; Wed, 01 Feb 2023 15:46:41 +0000 Received: from mout-u-204.mailbox.org ([2001:67c:2050:101:465::204]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pNFJk-0000gz-5u for pgsql-admin@lists.postgresql.org; Wed, 01 Feb 2023 15:46:40 +0000 Received: from smtp1.mailbox.org (smtp1.mailbox.org [10.196.197.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-u-204.mailbox.org (Postfix) with ESMTPS id 4P6R9M34V4z9sQm; Wed, 1 Feb 2023 16:46:31 +0100 (CET) Date: Wed, 1 Feb 2023 16:46:30 +0100 (CET) From: Erik Wienhold To: Rakesh Nashine , pgsql-admin@lists.postgresql.org Message-ID: <1571039881.130005.1675266390908@office.mailbox.org> In-Reply-To: References: Subject: Re: Role Does Not exist post server reboot MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Priority: 3 Importance: Normal List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > On 01/02/2023 15:38 CET Rakesh Nashine wrote: > > Hi ,I have found that post server reboot , one of the user/role is missin= g > from the postgres database . Need some assistance like how it is possible= . > If the server gets rebooted then how come the role is missing ? What happened prior to the reboot? Changes to Postgres configs or the data= base? > 2023-01-30 13:26:18.995 GMT epiemxb@postgres [14541] 10.94.234.138(61392)= [00000] LOG: LDAP login failed for user "CN=3DEPIEMXB,OU=3DMFUSERS,OU=3DEL= ASUserAccounts,DC=3Delas,DC=3Dlocal" on server "elwacpa1.abc.local": Invali= d credentials > 2023-01-30 13:26:18.995 GMT epiemxb@postgres [14541] 10.94.234.138(61392)= [00000] DETAIL: LDAP diagnostics: 80090308: LdapErr: DSID-0C090447, commen= t: AcceptSecurityContext error, data 52e, v3839 > 2023-01-30 13:26:18.995 GMT epiemxb@postgres [14541] 10.94.234.138(61392)= [28000] FATAL: LDAP authentication failed for user "epiemxb" > 2023-01-30 13:26:18.995 GMT epiemxb@postgres [14541] 10.94.234.138(61392)= [28000] DETAIL: Connection matched pg_hba.conf line 100: "host all all=C2= =A00.0.0.0/0 (http://0.0.0.0/0)=C2=A0ldap ldapserver=3Delwacpa1.abc.local l= dapbasedn=3D"OU=3DUserAccounts,DC=3Des,DC=3Dlocal" ldapbinddn=3D"CN=3Dmfadm= in,OU=3DMFUSERS,OU=3DELASUserAccounts,DC=3Delas,DC=3Dlocal" ldapbindpasswd= =3D" ldapsearchattribute=3DsAMAccountName ldaptls=3D1" The value of ldapbindpasswd appears to be wrong: =09ldapbindpasswd=3D" ldapsearchattribute=3DsAMAccountName ldaptls=3D1" There's the opening double quote but it's not closed until after ldaptls=3D= 1. This means that " ldapsearchattribute=3DsAMAccountName ldaptls=3D1" is used= as password for the search+bind authentication. > 2023-01-30 13:26:24.302 GMT epiemxb@postgres [14569] 10.94.234.138(61400)= [28000] FATAL: role "epiemxb" does not exist > 2023-01-30 13:26:32.050 GMT epiemxb@postgres [14573] 10.94.234.138(61410)= [28000] FATAL: role "epiemxb" does not exist > 2023-01-30 13:29:22.400 GMT epiemxb@postgres [15263] 10.94.234.138(61513)= [28000] FATAL: role "epiemxb" does not exist This error may stem from the failed ldap authentication. Have you verified= that the role exists in the database? -- Erik