public inbox for [email protected]  
help / color / mirror / Atom feed
From: Ron Johnson <[email protected]>
To: Pgsql-admin <[email protected]>
Subject: Re: Can't log in after password change
Date: Thu, 3 Oct 2024 13:39:37 -0400
Message-ID: <CANzqJaDdc3uk6tXw898Ptsa-db8euSOVwN7Z4yYrHtgWZxKWvQ@mail.gmail.com> (raw)
In-Reply-To: <[email protected]>
References: <CANzqJaChJ74uKN8Qsd+zfxH-89dZQxfkGBR6rhLoCSaYtoCU-A@mail.gmail.com>
	<[email protected]>

On Thu, Oct 3, 2024 at 1:34 PM Laurenz Albe <[email protected]>
wrote:

> On Thu, 2024-10-03 at 13:21 -0400, Ron Johnson wrote:
> > PG 14.13
> >
> > Changed a user's expired password from user "postgres", and now that
> user can't log in.
> >
> > I know it's something simple, but I just can't see it.
> >
> > Linux server:
> >
> > $ ssh -q FISPCDSPGS401A grep 11026270 '$PGDATA'/pg_hba.conf
> > host    all             11026270        10.176.64.0/22
>  scram-sha-256
> >
> > $ psql -h FISPCDSPGS401A
> >  keyword  |     value
> > ----------+---------------
> >  database | postgres
> >  user     | postgres
> >  host     | 10.143.170.55
> >  port     | 5432
> > (4 rows)
> >
> > psql (16.4, server 14.13)
> > Type "help" for help.
> >
> > postgres=# ALTER ROLE "11026270" WITH PASSWORD 'blarge';
> > ALTER ROLE
> > postgres=# select rolpassword from pg_authid where rolname='11026270';
> >
> rolpassword
> >
> ---------------------------------------------------------------------------------------------------------------------------------------
> >
>  SCRAM-SHA-256$4096:x551tt4biKIvossG7VwbjA==$syOJXKLOFZ8/LHUxHq8rE5q5dCEDNzB5wgOAHq1vmdI=:q670pqidak6v8YjP9KCCWrRmfkkJSvyf/AL0Ydg1k/o=
> > (1 row)
> >
> > Windows server:
> >
> > C:\Users\11026270>psql -h FISPCDSPGS401A postgres
> > Password for user 11026270:
> > psql: error: connection to server at "FISPCDSPGS401A" (10.143.170.55),
> port 5432 failed: FATAL:  password authentication failed for user "11026270"
>
> Did you look at the error message in the server log?
> What does it say?
>

Expired password.  I guess I assumed that the ALTER ROLE would nullify it.
And that psql would mention it.

-- 
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> crustacean!


view thread (4+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: Can't log in after password change
  In-Reply-To: <CANzqJaDdc3uk6tXw898Ptsa-db8euSOVwN7Z4yYrHtgWZxKWvQ@mail.gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox