Message-ID: <6e109baeabafa57970d7e8a9cdcb86abde8b14df.camel@lists.simkin.ca>
Subject: Re: Delays between "connection received" and "connection
 authenticated" because of localhost entries in hba
From: Alan Hodgson <ahodgson@lists.simkin.ca>
To: pgsql-general@lists.postgresql.org
Date: Tue, 29 Oct 2024 12:10:07 -0700
In-Reply-To: <CAM+6J95NCg6WNDjYyx42zjeocKXoPf7emci1zHCTboXGaE+WeQ@mail.gmail.com>
References: 
	<GV0P278MB0419EB5885DF99C5354804A9D24B2@GV0P278MB0419.CHEP278.PROD.OUTLOOK.COM>
	 <8ec9d0b8dac0e38075c9630f02ef25b088f290ec.camel@lists.simkin.ca>
	 <CAM+6J95NCg6WNDjYyx42zjeocKXoPf7emci1zHCTboXGaE+WeQ@mail.gmail.com>
Autocrypt: addr=ahodgson@lists.simkin.ca; prefer-encrypt=mutual;
 keydata=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
	5qHgEcjepXH8KPEtPd2yHQe3LhrlCwHvDRyM/J22dj2MLm7inmM5Tpq4qBLCrzo0x94t9TexwJLZmJQ2mBBTxLQuiKtTbqBOzNfJPOP0pFDocmflPUNZjJrFWWQLkjo1c30AzgVK/VVACHtC709U6Q+HOxQ+Ac/DNHcPRyezyi/ZAMk6ksXu7nACJuaAG8uLz1o7MsowAdHx+MufCIqFAQ9P222Tnbt4mJKpqDPC7Fh5pHIqYJUjQDIRE1SnnFM09eGm0utoETvGmc6gEEbFeVjSsj5XdYcJGtbxrpduYjF/CC1diA/7L0RCYzcKWPD7ckr5xOJ+tVP6Hsms4p+KJO9eQPjoLVMvRn1ekkSVpXrJuZZ7Hk6kO15l0NWrhGGinCxV5GVZy2VdluYh/uVx9RpT4NjE0/hGINZsNhU5L7p99JaqEjvAcTL0zQKyj9gUPlM42aMcKxK19XTi0LaWD9flhMAqAMDkTh+LoD9VJnNba023NLW0dXoq6W4zJxXi7eNyJro7dDb+1pPKbQoQWxhbiBIb2Rnc29uIDxhaG9kZ3NvbkB2ZW50dXJlbWVkaWEuY29tPokCOQQTAQgAIwUCVjjW3gIbLwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJEKegQKU05aoLnf4QAL99DEM26Cx6zAQ/DTNzfdj+4MNH/VoOnsyZhRD0MOg6OGpI2dsj+OouLPt9HQjKFxY80nFQUqFmWLcPxn1yrHRhItddpu+qN1pA0mdp0JfVtAqau6bQFe1Rp/oYdIIg4ZuOpalbYaS6tnlQrDt7HBhFcJqwOfOirs+SphKsxq2bge8uSujF63C2iIRMDNSiNtKkeHKSagyq7fsT6ZpLbYJdzNYLkRRRr4suDNplfxBTGJkSE6/QzfyS9laBDWDVFvRxVzb6K6Bp7mpHHZgRTx78gu/3bFBV1/1RWcq8OTZQFZm2mLE9ftjERGzLrtwXwe+b24Ubg60Q0N
	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
	BGYJIdVJX/7fT2LBflnUDVryj23LDY5cU7HCGwDghcYFALSBv/2SKNyCY8piF0tE0aFKh4y3Nk0R6VdgRmMXnnMzA823scgRvDj01eG2ZlzN0jhrOG3qrKaDGpYouCDlTPU3nZPRBnXt75v/wm/WYDtZhHDsuSQUzzSeo2M/kkMSbydIYeHSyjDOt3nph4GMDYLQnQWxhbiBIb2Rnc29uIDxhaG9kZ3NvbkBsaXN0cy5zaW1raW4uY2E+iQJOBBMBCAA4FiEE74JvjaO6oJb/owXyp6BApTTlqgsFAlxjAUACGy8FCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQp6BApTTlqgvvTg//QfAtiwZgaOv+NXGNpw7xWiL30HmmNtgUKHsQtrjajA1x7PhX4dgeNgtj23qgNsAAnk9FV5k+m8El7zNj+BG/Jm19VT+5lY2VJI0fOuEF1nDX/mGmFamdHmIPHPQDsYMJ97vX4Ine7OFmR377xiM1lat7mGMViTNetXiaFFAErxRnZLYLwify573t9n04YCF4gSADrBllPi6NWxZp/FAI74Ay9R9wWz9RwLl4NlFiKdbR7nYIoiy6bLu4nPlgteC09Qo+JsImvAsG8q5E6KI7MV1lvEYop/kBdg7A93UbnZIuYnefQzcURFvxFSWSRKjMYhPN6/dBFzNmGV36Cw4h2xqtjqx0Eh9E/9BgLQKy/zrXSR0ggWG3Ub9CIG3UBVr0E9SzVsPtgN2km0mkt429XQWTV9vgFC3lCtOVYzD+vKxlM2DlzavKlII9sd8HrqVfiJh2lSUjWZhDc4Q694dzLlXw0w33P2VlD1zBrxvpj2HyK64Ze2Mg3xI3X3dvVVXdYyhNn4F7V2wol+UrijbN1w+xUIiAtV8xOD3jRTz52wYJYx2qFEzLh+c1g6GRC0eVxubv23qNF7yVWHJsOZIawH2RmjhI6OCw0y/ug8yykr2bB3dzp2/FNOJqyCXb3q7M
	EFrFjuawbbcBmMZjrQsGLvDw+mZY1bYUkXjIwJBCUbS0JUFsYW4gSG9kZ3NvbiA8YWhvZGdzb25AY2hpdGNoYXRzLmNvbT6JAk0EEwEIADgWIQTvgm+No7qglv+jBfKnoEClNOWqCwUCXG2gmwIbLwULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRCnoEClNOWqC9MUD/dvWjuvfNMQVXrkTyJucngDlj/HDPQqwT8OE+gudR6peUe14uxmwkIwl1XTmcDFW7s00IN2NLm8TsFIPolbmtgvK56+11hGSbWtKcZX44iY7G81/TqWV1KNJC+HV8SWitKmJP32VSw5Ck3RU9PUKZt2mgMCImziNjY2qybVkm6OijIiZj2HPu5ANyOFHtwrEMLCZZALTO+zvKAEVPZBmvCIffRcAUBPv7hZa4wIfYqfcgAIyltKFZxtFRhVGVMyDDqNqJOw2iQn11eXThTu3lodfICZM8of9KKzakgHUOPVx76o1oUFRXb0Oj+ChvBDzM0V+SuoMiI4t3GPeZRvlju5aT2MGQbGgkJBY8Ccj0ODUo7g5pQTdc7tnLvc9S1zz81REuOd3oJQfGrKaA+7W6MJPwZiSivJM9g8V62z7PeQ7NR8DwVR4fOKfG1E2oD6rZmLwRN0xHmVZ90mMXHvD2uoAlqKFCU3haIqi7IUzOyTbP4HDvQTyAq6yxPaKoSdXP3W46un14ocsW6+VIBcZo6uEgGgkDgmV1bHPpvCK4J777NW6UH+V5+sewfAUVdJwbLgQv1rSGDovxuJh2H3COLrW7OVSZO3R5+Wa0/Dtt7LrIqyn/TgsBE8R2r4im+FM10nWGVchBbg/WSoJHQ/ddL+t91XCobbK/5EOIymUxQGuQINBFcFWA0BEACwK5T0/z5Mlk95wKIt3tXQUvgGVChYz5xTWYSCVgg//1KScYrfEr3NszKJoF+vf1qQpTN2G/Fhf6TxLrL2SY6Y/FI79nQkqZFYD
	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
	3hfmOZifZEcJ5POz/osFfcNEvjKSAquS84NJyMv0kf66h9CszmSeGvOkYeFCXNOQcSkC5N4e0GE+fK88s8P2glpY2NG0myma35l3KDacRCZUqu8b3M4pSEHkNqEqmY8iqp+Q8QEtdvFh1IJJID3NZfO2las3Cti2tHB89/Cn5t1SXWOSLYu9cSgvqmb0L4sc5VpfEURqoIOnQ2j5aXhIfi2Nm508lY5EIr+1a3McYWUpy4U+a/2/7IkqTYV7G3ENPRx1xbZtS+d9CYQCXSudwO7/P65G6ZzZV4ZSbyFHYPyC6FgHgXFs+VpsY2t6BsYVJta/vHnqUA1UkR832kgahba5spxx4DZheuhtmGXXcP+wVPQFJm1SuWCJXg3kBnSF/g/XBMk8Qk829hAsQAh1qRxmYIQqZl0zcwZDzJ9LBGaq1MO8AWOu7Tc6vpUt5MlKrdrGKjJUmbvUtLdZU/c0nm7aQNkQgvbbRxlR3MpD2yVFSVsZED5IQ4awKEZcGWa4Kq9Ynw3HnlxhL0elVQUip+NYC+K40qQVYgDFnkBgVeqz2soCKRYW1Nsn1V1aGXpdbXVexkCZooxDByyk8/KzquCLj2zK+P5WkeNmZ0Ld47eovRVVBQcBe45j79wnxbAesR+hqE7/uaVR7JtTWPyzNwsrWgCc6tc8IhME0YzD3/ko8AzNd/y5gShoDlkj3y/FztKB9mSojs8DkRlrjbjbU7YxX3bCNK69KnMLPXqeZxbAFT4cc229B7+4X3wnoA0ZH8zUDEB/ENjpAmwNI7Iz48yNPyeQvXzHPwrXKVhQ/PYfyQQCDf5LSF+zL+2+SwGMzLlPfVc1TVjQJmzLneZvv/8accRpI7gEl9cdWgFa48hKOSv/IuR79SJGuzTfuRQYPpNCJIqCAjVtVR1uaFaUdFyR6kTJXcu7lrFkdiPOSdnXRCIrisK2jsQJApHtY4mZo2Z8H6OteFIOzptVtddzyqsj7I6bPZRoT5EAU
	JHJDWiauekF87ogH8xbisXOGeAVRNJzrUgozyJIOkmlmYpUva
Content-Type: multipart/alternative; boundary="=-4kIXGrL2HhqggSnIskAp"
User-Agent: Evolution 3.50.2 
MIME-Version: 1.0
Archived-At: <https://www.postgresql.org/message-id/6e109baeabafa57970d7e8a9cdcb86abde8b14df.camel%40lists.simkin.ca>
Precedence: bulk

--=-4kIXGrL2HhqggSnIskAp
Content-Type: text/plain; charset="ISO-8859-15"
Content-Transfer-Encoding: quoted-printable

On Wed, 2024-10-30 at 00:15 +0530, Vijaykumar Jain wrote:
>=20
>=20
> On Wed, 30 Oct 2024 at 00:04, Alan Hodgson
> <ahodgson@lists.simkin.ca> wrote:
> > On Tue, 2024-10-29 at 16:30 +0000, Daniel Westermann (DWE) wrote:
> > > Delays between "connection received" and "connection
> > > authenticated" because of localhost entries in hba
> >=20
> >=20
> > Maybe check that "files" is the first mechanism for hosts lookups
> > in nsswitch.conf.
> >=20
> > afaik dig doesn't follow the same name resolution path as glibc.
>=20
>=20
> a connection received=A0should mean resolution was done, right ? am
> i=A0missing something?

Well, I'm just throwing out something to check, but I meant on the
server, not the client. It's trying to resolve "localhost" to check
the auth. If there's a delay, that's probably where it is.

I guess I just assumed that's where you were testing dig.

--=-4kIXGrL2HhqggSnIskAp
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html><head><style>pre,code,address {
  margin: 0px;
}
h1,h2,h3,h4,h5,h6 {
  margin-top: 0.2em;
  margin-bottom: 0.2em;
}
ol,ul {
  margin-top: 0em;
  margin-bottom: 0em;
}
blockquote {
  margin-top: 0em;
  margin-bottom: 0em;
}
</style></head><body><div>On Wed, 2024-10-30 at 00:15 +0530, Vijaykumar Jai=
n wrote:</div><blockquote type=3D"cite" style=3D"margin:0 0 0 .8ex; border-=
left:2px #729fcf solid;padding-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr">=
<br></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_at=
tr">On Wed, 30 Oct 2024 at 00:04, Alan Hodgson &lt;<a href=3D"mailto:ahodgs=
on@lists.simkin.ca">ahodgson@lists.simkin.ca</a>&gt; wrote:<br></div><block=
quote type=3D"cite" style=3D"margin:0 0 0 .8ex; border-left:2px #729fcf sol=
id;padding-left:1ex"><div class=3D"msg-966069511753028374"><div><div>On Tue=
, 2024-10-29 at 16:30 +0000, Daniel Westermann (DWE) wrote:</div><blockquot=
e type=3D"cite" style=3D"margin:0 0 0 .8ex; border-left:2px #729fcf solid;p=
adding-left:1ex"><div>Delays between "connection received" and "connection =
authenticated" because of localhost entries in hba<br></div></blockquote><d=
iv><br></div><div>Maybe check that "files" is the first mechanism for hosts=
 lookups in nsswitch.conf.</div><div><br></div><div>afaik dig doesn't follo=
w the same name resolution path as glibc.</div><div><span></span></div></di=
v></div></blockquote></div><div><br></div><div><br></div><div>a connection =
received&nbsp;should mean resolution was done, right ? am i&nbsp;missing so=
mething?</div></div></blockquote><div><br></div><div>Well, I'm just throwin=
g out something to check, but I meant on the server, not the client. It's t=
rying to resolve "localhost" to check the auth. If there's a delay, that's =
probably where it is.</div><div><br></div><div>I guess I just assumed that'=
s where you were testing dig.</div><div><span></span></div></body></html>

--=-4kIXGrL2HhqggSnIskAp--