public inbox for [email protected]
help / color / mirror / Atom feedFrom: Ron Johnson <[email protected]>
To: pgsql-generallists.postgresql.org <[email protected]>
Subject: Re: pgpass file in postresql.auto.conf?
Date: Fri, 26 Sep 2025 08:47:48 -0400
Message-ID: <CANzqJaAfxs6ip+8mbriqiqiqCj8nk28_SxdeyxLb6Tnmf9CuoA@mail.gmail.com> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
On Fri, Sep 26, 2025 at 8:06 AM Dan Mahoney (Gushi) <[email protected]>
wrote:
> Hey folks,
>
> In the interest of automation, I've set up a pgpass file for my
> pg_basebackup between master and standby. This all works, thusly:
>
> pg_basebackup -d
> 'postgres://[email protected]:5432/foo?sslmode=verify-ca' -F p
> --wal-method=stream -P -R -D /var/db/postgres/data17-test3
>
> However, instead of the password getting baked into the pgsql.auto.conf,
> the reference to the passfile gets put in, instead:
>
It's still early in the morning, so I might still be fuzzy-brained, but are
you asking why the repuser password is not hard-coded
into postresql.auto.conf?
> # Do not edit this file manually!
> # It will be overwritten by the ALTER SYSTEM command.
> primary_conninfo = 'user=repuser passfile=''/var/db/postgres/.pgpass''
> channel_binding=prefer host=10.1.1.1 port=5432 sslmode=''verify-ca''
> sslnegotiation=postgres sslcompression=0 sslcertmode=allow sslsni=1
> ssl_min_protocol_version=TLSv1.2 gssencmode=disable krbsrvname=postgres
> gssdelegation=0 target_session_attrs=any load_balance_hosts=disable
> dbname=foo'
>
> But it seems postgres won't actually read the passfile.
>
> Sep 26 12:01:27 hostname postgres[42455]: [7-1] 2025-09-26 12:01:27.658
> UTC [42455] FATAL: could not connect to the primary server: connection to
> server at "10.1.1.1", port 5432 failed: fe_sendauth: no password supplied
>
> Am I doing something wrong here?
>
*When* do you get that message? And what does "for my
pg_basebackup between master and standby" mean?
> I'm loathe to hand-edit the file, because of that warning there.
>
> Why does pg_basebackup put a reference to a file it it won't read it?
>
Because you have a subtle bug in the .pgpass file. It's case sensitive,
and requires the domain name of that's part of $HOSTNAME.
> Is there an alter system command that can be used to properly populate the
> password into this file?
>
Does the .pgpass file work for "regular" connections?
--
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!
view thread (3+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: pgpass file in postresql.auto.conf?
In-Reply-To: <CANzqJaAfxs6ip+8mbriqiqiqCj8nk28_SxdeyxLb6Tnmf9CuoA@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox