From: Ron <ronljohnsonjr@gmail.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: FATAL error in logs: no pb_hba.conf entry
Date: Thu, 29 Apr 2021 22:21:22 -0500
Message-ID: <cb7439cf-3033-a40d-7bdd-2f04e023194f@gmail.com> (raw)
In-Reply-To: <1566938499.2834154.1619746776214@mail.yahoo.com>
References: <1566938499.2834154.1619746776214.ref@mail.yahoo.com>
<1566938499.2834154.1619746776214@mail.yahoo.com>
On 4/29/21 8:39 PM, james terris wrote:
> Hello,
> I have a postgres version 9.6 server running on and old Windows Server
> 2008 R2 server.
An *EOL* Windows Server... Don't feel too bad: I've got to manage SQL
Server 2005 on Win 2008 R2; earlier this year, we just migrated SQL Server
2000 to 2016.
> I noticed this message in the logs:
>
> FATAL: no pg_hba.conf entry for host "::1", user "APPSERVER$", database
> "postgres", SSL off
>
>
> It's true that I don't have a row for the the "APPSERVER$" user but I'm
> not really sure where that user is coming from. It's the server name and
> it's only trying to log in via IPv6 ?
>
> If someone could give me some more details about why is causing that log
> line that would be great. I have other servers configured without that
> line in pg_hba.conf and they don't have that FATAL message.
It means exactly what it says: some process is trying to log in as user
APPSERVER$ from the IPv6 loopback device. This is a security concern. Look
in the Windows Event logs for that user, ask the Windows sysadmins, and the
end users who care about this.
> My pg_hba.conf looks like this:
>
> host all postgres 127.0.0.1/32 md5
> host anotherDB anotherUser 127.0.0.1/32 md5
> host all postgres ::1/128 md5
> host anotherDB anotherUser ::1/128 md5
--
Angular momentum makes the world go 'round.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: ronljohnsonjr@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: FATAL error in logs: no pb_hba.conf entry
In-Reply-To: <cb7439cf-3033-a40d-7bdd-2f04e023194f@gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox