public inbox for [email protected]  
help / color / mirror / Atom feed
From: vijay patil <[email protected]>
To: David G. Johnston <[email protected]>
Cc: [email protected] <[email protected]>
Cc: [email protected] <[email protected]>
Subject: Re: Issue with Password Authentication for Pgpool
Date: Thu, 9 Jan 2025 11:01:00 +0530
Message-ID: <CAD5k+7yM3EgYOU8XqzaF9fNTZoLeYb=ocPjgSBt+_1w4hvuDTw@mail.gmail.com> (raw)
In-Reply-To: <CAKFQuwbAHZNE1M1GA5+STmi_RDaBm+aLUFzTG_C72jNbxC8DVg@mail.gmail.com>
References: <CAD5k+7yAt2bMUpgcEsDEvtJZA2yhre8_ENjjrWZ6VRjy5J8vzQ@mail.gmail.com>
	<CAKFQuwbAHZNE1M1GA5+STmi_RDaBm+aLUFzTG_C72jNbxC8DVg@mail.gmail.com>

Thanks David,

I tested the configuration by setting allow_clear_text_frontend_auth = on
and disabling the pool_hba. I made the corresponding entry in the
pg_hba.conf file. However, while connecting through the database port
(5432), it prompts for the password, but when connecting through Pgpool
(port 9999), it does not ask for a password.

Here is the content of pg_hba.conf:

bash
Copy code
# TYPE  DATABASE        USER            ADDRESS
METHOD# "local" is for Unix domain socket connections onlylocal   all
           all                                     trust# IPv4 local
connections:
host    all             all             127.0.0.1/32            trust#
IPv6 local connections:
host    all             all             ::1/128                 trust#
Allow replication connections from localhost, by a user with the#
replication privilege.local   replication     all
               trust
host    replication     all             127.0.0.1/32            trust
host    replication     all             ::1/128                 trust
host    repmgr          repmgr      127.0.0.1/32            trust
host    repmgr          repmgr      10.125.0.90/32             trust
        # Primary
host    replication     repmgr      10.125.0.90/32             trust
host    repmgr          repmgr      10.125.0.91/32             trust
        # Standby
host    replication     repmgr      10.125.0.91/32             trust
host    all         all         10.125.0.90/32       trust            # Node 1
host    all         all         10.125.0.91/32       trust
# Node 2#host    all         all         0.0.0.0/26          trust
host    all         all         10.125.0.79/32           scram-sha-256
host    all         all         0.0.0.0/0           scram-sha-256

When I connect via the database port (5432), it prompts for the password as
expected:

[postgres@scrbtrheldbaas002 ~]$ psql -h 10.125.0.79 -U vkp -d postgres -p 5432
Password for user vkp:
psql (15.3)
Type "help" for help.

postgres=>
postgres=>
postgres=> exit

However, when connecting through Pgpool (port 9999), it does not prompt for
the password:

[postgres@scrbtrheldbaas002 ~]$ psql -h 10.125.0.79 -U vkp -d postgres -p 9999
psql (15.3)
Type "help" for help.

postgres=>

This behavior might be related to how Pgpool handles authentication. Let me
know if you need further investigation or configuration changes!

Thanks

Vijay

On Thu, Jan 9, 2025 at 10:47 AM David G. Johnston <
[email protected]> wrote:

> On Wednesday, January 8, 2025, vijay patil <[email protected]>
> wrote:
>
>> Could you please advise how I can achieve password authentication without
>> using the pool_password file, while ensuring that Pgpool prompts for the
>> password during connection?
>>
>
>
> https://www.pgpool.net/docs/latest/en/html/runtime-config-connection.html#GUC-ALLOW-CLEAR-TEXT-FRONT...
>
> David J.
>


view thread (7+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: Issue with Password Authentication for Pgpool
  In-Reply-To: <CAD5k+7yM3EgYOU8XqzaF9fNTZoLeYb=ocPjgSBt+_1w4hvuDTw@mail.gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox