MIME-Version: 1.0
References: <CAD5k+7yAt2bMUpgcEsDEvtJZA2yhre8_ENjjrWZ6VRjy5J8vzQ@mail.gmail.com>
 <CAKFQuwbAHZNE1M1GA5+STmi_RDaBm+aLUFzTG_C72jNbxC8DVg@mail.gmail.com>
 <CAD5k+7yM3EgYOU8XqzaF9fNTZoLeYb=ocPjgSBt+_1w4hvuDTw@mail.gmail.com> <CAKFQuwZsKF+Sq+OHaiZrwZLCabLqkuh81N6-o9peYjc52reNwQ@mail.gmail.com>
In-Reply-To: <CAKFQuwZsKF+Sq+OHaiZrwZLCabLqkuh81N6-o9peYjc52reNwQ@mail.gmail.com>
From: vijay patil <vijay.postgres@gmail.com>
Date: Thu, 9 Jan 2025 11:34:23 +0530
Message-ID: <CAD5k+7z7ns134qsF7hrxGXqWKZ-GCPeZaTePx0FowH_GG55+_A@mail.gmail.com>
Subject: Re: Issue with Password Authentication for Pgpool
To: "David G. Johnston" <david.g.johnston@gmail.com>
Cc: "pgsql-general@lists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000a6428a062b3fc0db"
Archived-At: <https://www.postgresql.org/message-id/CAD5k%2B7z7ns134qsF7hrxGXqWKZ-GCPeZaTePx0FowH_GG55%2B_A%40mail.gmail.com>
Precedence: bulk

--000000000000a6428a062b3fc0db
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

If we plan to use pool_hba.conf, then we must use the pool_passwd file to
maintain passwords for all database users. This approach requires that
every time a new user is created, their password is added to the pool_passw=
d
file. The challenge with this method is that it becomes difficult to
maintain, as we need to manually update the pool_passwd file for every user
creation or password change. Additionally, after updating the pool_passwd
file, Pgpool needs to be restarted for the changes to take effect.

Thanks
Vijay

On Thu, Jan 9, 2025 at 11:14=E2=80=AFAM David G. Johnston <
david.g.johnston@gmail.com> wrote:

> On Wednesday, January 8, 2025, vijay patil <vijay.postgres@gmail.com>
> wrote:
>
>> This behavior might be related to how Pgpool handles authentication.
>>
>
> Having never used pgpool I very well could be wrong but from what I can
> gather what you want to do is simply not possible within the current desi=
gn
> of pgpool.  Namely you have multiple nodes so cannot rely on raw mode but
> raw mode is required for the kind of pass-through auth you are trying.
> Instead you require pool_hba.conf which itself requires the password file=
.
>
> David J.
>
>

--000000000000a6428a062b3fc0db
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">If we plan to use <code>pool_hba.conf</co=
de>, then we must use the <code>pool_passwd</code> file to maintain passwor=
ds for all database users. This approach requires that every time a new use=
r is created, their password is added to the <code>pool_passwd</code> file.=
 The challenge with this method is that it becomes difficult to maintain, a=
s we need to manually update the <code>pool_passwd</code> file for every us=
er creation or password change. Additionally, after updating the <code>pool=
_passwd</code> file, Pgpool needs to be restarted for the changes to take e=
ffect.</div><div dir=3D"ltr"><br></div><div>Thanks</div><div>Vijay</div></d=
iv><br><div class=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" cl=
ass=3D"gmail_attr">On Thu, Jan 9, 2025 at 11:14=E2=80=AFAM David G. Johnsto=
n &lt;<a href=3D"mailto:david.g.johnston@gmail.com">david.g.johnston@gmail.=
com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"marg=
in:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1e=
x">On Wednesday, January 8, 2025, vijay patil &lt;<a href=3D"mailto:vijay.p=
ostgres@gmail.com" target=3D"_blank">vijay.postgres@gmail.com</a>&gt; wrote=
:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><di=
v dir=3D"ltr"><p>This behavior might be related to how Pgpool handles authe=
ntication.</p></div></div></blockquote><div><br></div><div>Having never use=
d pgpool I very well could be wrong but from what I can gather what you wan=
t to do is simply not possible within the current design of pgpool.=C2=A0 N=
amely you have multiple nodes so cannot rely on raw mode but raw mode is re=
quired for the kind of pass-through auth you are trying.=C2=A0 Instead you =
require pool_hba.conf which itself requires the password file.</div><div><b=
r></div><div>David J.</div><div><br></div>
</blockquote></div>

--000000000000a6428a062b3fc0db--