public inbox for [email protected]
help / color / mirror / Atom feedFrom: Drew Zoellner <[email protected]>
To: [email protected]
To: [email protected]
Subject: Replication using mTLS issue
Date: Thu, 20 Jun 2024 10:15:58 -0500
Message-ID: <CAGWxRFfWbD3NNJcpiPA6+g+UYRHAmD6Z4+rQaHoNi5+EEt1gOg@mail.gmail.com> (raw)
Hi Postgres team, I’m receiving an issue matching pg_hba rules that I can’t
seem to sort out. I am trying to use mtls certificate authentication for
physical replication connections but keep receiving the following error…
pg_receivewal: error: FATAL: no pg_hba.conf entry for replication
connection from host "100.84.12.223", user "pgrepmgr_nonprod", SSL on
My pg_hba.conf file contains
hostssl replication pgrepmgr_nonprod 100.0.0.0/8 cert map=pgrepmgr_nonprod_map
I’ve made sure the rule comes first in my pg_hba.conf file or last.
I’ve read the pg_hba documentation fully and tried with all values for
hostssl field, user field and ip field. Still no luck.
Is cert authentication supported for replication connections?
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: Replication using mTLS issue
In-Reply-To: <CAGWxRFfWbD3NNJcpiPA6+g+UYRHAmD6Z4+rQaHoNi5+EEt1gOg@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox