Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tVw1M-00Clmd-Pw for pgsql-general@arkaria.postgresql.org; Thu, 09 Jan 2025 17:08:38 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tVw1K-004vs9-H8 for pgsql-general@arkaria.postgresql.org; Thu, 09 Jan 2025 17:08:34 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tVw1J-004vrq-VW for pgsql-general@lists.postgresql.org; Thu, 09 Jan 2025 17:08:33 +0000 Received: from mail-bn8nam12olkn2029.outbound.protection.outlook.com ([40.92.21.29] helo=NAM12-BN8-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1tVw1G-000las-12 for pgsql-general@lists.postgresql.org; Thu, 09 Jan 2025 17:08:33 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=bwRWywbbhdxy5WpBmk7/2U2ds1n8vgifURp0161pFzxtUS2zekvOAj59LWQAuGc+W8o2NhjjqO7Usv8IEvigJKVv6XSU/wMCCNqtJvQEDWKP3ks0N/19wz9oewMEbYOkYQ0t7oj7o3ASrG742rvBwpOYmnO28E4CeAn9mlDYku6yqfblcO7pktuRLYo+2WnYJZwIqyF/qM0Z8yclxvxlLEcTuamqAGhaRVZOpLlr8qqghxsd/xaMkuXSSa4XjTNwjN7R/vzRVJXS5dg0dSxeeydTpO8VcWvsEaIQH2ObPXhTKQ9p5pK3kz4fO3X7439knBBIaqPN3/06FZwioVOckA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Q3BxsFf2BATk4S7vj6r0Cz6kw+ITi2bH4OnW5y1Op6U=; b=JYiNGdqUeGH4mwjoAHpIAwOvOsDJ9EFtb+MCbXkd8T672yBT/a4PCb6I0QuNPdWAeNcsmoOBBoJ4sbK+5rvTdM+a7mRtUrCA0IA3wHruZ6SVrgU+YnsWydP3tZHzQm+FcSHAapWYKhaf3Ylixicl05trMmU+Br0swL0N4dVD5z58ToX/hN4bc/giPSeq8WpQxTyadUgHli7SkkxInSGHfVRAKu0JUCIGYcLAwAWGvS68wRpnN6D6bP2wjjesg5T71E02/LT0x/yFkQftGQsBxYB/H3QuvLe7d7cKAQEXts62sQ3UNH6s2bQB5g3V5sbHyzyHlsZf4d/6ed8fYTaSmQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q3BxsFf2BATk4S7vj6r0Cz6kw+ITi2bH4OnW5y1Op6U=; b=UKnwB0yMq6GvYJ7iKG2dgaViRMkzmxCOM/Urdgg9pRikwjtsDDd9Wj/uLamEccV3Zg+R83jo/Thgj2q76TPYhiTDxFPUQa2Xv4y0Chwb88shu4b2b3LWrCx5+ZJpDT3FN3huhctV9XWfGpEvhoZPKOXCsRB0l6JXFMp5qFyyYGqvqC3isGoX/h0xIhYuHcYZfZ7X3LrUde58GydT172r4wD1hUNAkWG/71JhrrEaNXwHaB6CHGBAauQBWYJ7ijaE2EB2My+7w4UNFrYapZeG1RJGcBdC6O2BAerq/1+aure94aB2qhaPetBa5U957mTX7RtaonBXFs1olp/RHCv1EQ== Received: from CY5PR19MB6447.namprd19.prod.outlook.com (2603:10b6:930:3d::11) by SJ0PR19MB5611.namprd19.prod.outlook.com (2603:10b6:a03:42b::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.11; Thu, 9 Jan 2025 17:08:27 +0000 Received: from CY5PR19MB6447.namprd19.prod.outlook.com ([fe80::7b16:962c:219:b49b]) by CY5PR19MB6447.namprd19.prod.outlook.com ([fe80::7b16:962c:219:b49b%7]) with mapi id 15.20.8335.011; Thu, 9 Jan 2025 17:08:27 +0000 From: Martin Gainty To: vijay patil , "pgpool-general@pgpool.net" , "pgsql-general@lists.postgresql.org" Subject: Re: Issue with Password Authentication for Pgpool Thread-Topic: Issue with Password Authentication for Pgpool Thread-Index: AQHbYlRQMBx1kA4SP0iDKNY0GetEJLMOq2HI Date: Thu, 9 Jan 2025 17:08:27 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: CY5PR19MB6447:EE_|SJ0PR19MB5611:EE_ x-ms-office365-filtering-correlation-id: f6a7cff9-f402-4f46-dec8-08dd30d03bcb x-ms-exchange-slblob-mailprops: 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 x-microsoft-antispam: BCL:0;ARA:14566002|8062599003|12050799009|8060799006|15030799003|19110799003|461199028|9400799030|7092599003|15080799006|1602099012|10035399004|440099028|3412199025|4302099013|102099032; x-microsoft-antispam-message-info: =?Windows-1252?Q?RV26MSi6yk5/iGievaNGdggTQcaF3Piihc0nbQxMI7OJpTfmud3MtIVG?= =?Windows-1252?Q?EnrnQ86gWiHLp9wMHyBKwAyNQIpzeVUmm6W4hfJ3BLfvBZhLxE8eG/gV?= =?Windows-1252?Q?AogSPD0GzVrmYJviC65maMTFarA5x9QE5jlUK61BMXvUyevG1+269JBs?= =?Windows-1252?Q?lIdwItiOYJ8EGXk5Gj74Ktt5yqtIlKg2JVo0IMgaqYk9RgflP5YCfQ1j?= =?Windows-1252?Q?j49PIkz2JCzhLRUBKH/BXbrrLMCw4ObQpYUh+8I6Uh2lO4kRFWCuPBRG?= =?Windows-1252?Q?+4bpKno3CRa0U25huM2rVmvChA+YSAitjVN1NSsJqHx3zTlfjKmBwYoV?= =?Windows-1252?Q?Nie1Uu1uwyJsHaVIODpKriIg4NZgTeMLu48v5RFmkyhTseqrFrhuqa3u?= =?Windows-1252?Q?HR2iM5ukjr+G/q6zJoLSH1HMJ92NVBNSYxnX28y0eTAbtBOJOvSa0F2p?= =?Windows-1252?Q?my6OgqEQxkmWk2h6UjcvN4xSDfAnIOObmTH5Nf5r942u5WgRFhinu8zv?= =?Windows-1252?Q?hWDOuTzkXhYTpILnj2C09mdu6yhSLgGwJ6c6kiZQ06sEkSfrpnvlqY+9?= =?Windows-1252?Q?+Xh4aM5ciAHS4gdyg/XvE7L6nezdqL1/DgE3p7ST4C4W2W5j9YJKMgje?= =?Windows-1252?Q?tKwblkVt5+DqxF4WBNnjY7oP+ySECL2LVfd+MkGLUjm1ZG8Fj7ZLigIZ?= =?Windows-1252?Q?7iF2xxyEMWomqLQmpVTJn2XqsQ4zCT44FkvdnpsDBKmv++NDzUz7/oLQ?= =?Windows-1252?Q?5gZ7+mXlYxjo71xswlZTiOv4/1a/BoAXGXbXiz3nSov5DaJ0TmpjqxtZ?= =?Windows-1252?Q?n5XTpkXqNN9VwHtCb7f7XwQPk3GnQB/kS5SlZkY4agOaYBe7+ymaTOjG?= =?Windows-1252?Q?dAYzx5+q3GZHL3eOt0YLBwSHIviiO6mbDJ2T/Sdcp6KuKvzvj8fghx/w?= =?Windows-1252?Q?6HkAMYZTWmBbtAaT31mfpIUZG3K5GYL1NOLC4PYgQ42i1Q1OYF+/JY/E?= =?Windows-1252?Q?Dwe8wRgVSxNkU2jXET45+4myl8tZUM9dkornbkqNYoF+ljbENOg2KAIP?= =?Windows-1252?Q?o5uYPHX086FSAGAIJKAL03h4iygMPsp0LQgd5RHliYfeZEJhKOwjT4Dc?= =?Windows-1252?Q?z6Tac5DCN8nCc5Gw7fCX+CadPfiTx7q9SNCia/3VsrL3Og1mK088RcKX?= =?Windows-1252?Q?/Q04wNLOQFlzJ3EIx4eHr60t0RjWQD/UTPfxNSg51smcsh0I/6H7Fknw?= =?Windows-1252?Q?NYE5NCithqt037EvSpeem4xlLjhNWkisaOehWrGSB+1MI0CxPLtNYzxz?= =?Windows-1252?Q?W3rwnvUuugcjG/uhPNP6dgfh/iZdFGWessdv08Sdts59X2O6AM5JqZyi?= =?Windows-1252?Q?Ob4GzHivRGrbKcn3vArd2SR69NyQG6/ssYQ=3D?= x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?RdeENpPIYfayCEXWZGqHnolMB6pYewq8CcWJZ5Dh/KdAQYmCtz/xdlXW?= =?Windows-1252?Q?r4XpWF/bzGdBxR+WmJ+xzCxOGVMziAFAxvibBv2RvMzpgeHcpx+8UCFd?= =?Windows-1252?Q?DBcl55O72IJV5CInzH7nZAstAJYP61Xjv0/+DkofJyEaT1W1bqAKN3AR?= =?Windows-1252?Q?+1Eim822BVA5L7iypVSjcrskZJTs9AbaPY3vs6CGRQIZsa5u9anwE1qC?= =?Windows-1252?Q?KZAnRzOXhMOujEXwKp7VkPTniRo+OxN+9ZEUlJvRdLf2KNa/LCjvIkAC?= =?Windows-1252?Q?w5TTwGqYxOQAmUhtAAe7f802Ce/qp4f3g09K2+FERT0WDyWClT6gbPWO?= =?Windows-1252?Q?oGiPZp356UOTgmoTI9hdGvudJgr3PWDvTW0FRX0O6oR4//jpb0xlV4Rz?= =?Windows-1252?Q?HszxAo+zNT5l3yCcWB4fpxvsPvVN0mL9bonQPaKmKjiWkRrtggV3uKfQ?= =?Windows-1252?Q?knK5bM/yrLc/alC9viA1IU7fwj+dvHhxGw3JtsDMdpxOjFHlGBfT8IXK?= =?Windows-1252?Q?6so+45u09R6HrsdwLdnQjg+NMTckf5RmvK36yek21GRAoKVFJ1Znf7yC?= =?Windows-1252?Q?suMjFnC1YaddP24gcTCH8caSbvncZrx1EBjShMx9v6llkME/0A4g7vwe?= =?Windows-1252?Q?VNjbPfuuvxjwebG6cgQUJpjzHzPKlhf7RQ58MvhaI2fV8zj63RZYSjeR?= =?Windows-1252?Q?RSAupl9sxi6XjtpHgZgvQ7vddcbJtgYCXV67RYExFym3D9LaGYR/Ei9e?= =?Windows-1252?Q?0SgCUux9+rBXTKpm6ozuUTWJv3Ni2fSHwM6khD9Uz/Kmp8TdrBVxvLrb?= =?Windows-1252?Q?8RFadtt+15Qc0LLifi6n0nl7xlf0F+pQjlsYk7SK5VErEjDTIdLeiPLF?= =?Windows-1252?Q?qs/5aT2BWtfzk90A6tS+W8JKQ9smO5QRP8YUbuZ8BRv6KI2A1/elRT2V?= =?Windows-1252?Q?1So7tYV0n1vh3Igg1dr8LgXZjMozte5AtROgELxEBzVg7CpcW+k0zDBA?= =?Windows-1252?Q?qhXXuAxTrvi2i/TmIPF+l1gJGcE/moINpbZFl4hWz8tdZtcstMjdijdE?= =?Windows-1252?Q?U3J51T1iS+Ccm8c4AwU8jXJ/xyzhs7JYJBlCPpkd7Nrn9qyY4vWnZf43?= =?Windows-1252?Q?tzT1oR+d7usO1qHF6QMyHYOJnJqN298D+qDl+wVpl6UmWMBFe16dpZzd?= =?Windows-1252?Q?UY4Wma2hlje6NBHTPaCIQI9OtRTBOLcrjKym9crYOa5ZDBR7ktGCTkZa?= =?Windows-1252?Q?gRrGv5CvnlxQqjg0PweDJUMHv3SbP4SkInq1ujTwU+D/Nl38eEyd+7Wi?= =?Windows-1252?Q?N9U84NfAtb0xOo9kUTWEzZCOuqaoremh8eQlSedb7gcqjB8lqk1NiO/R?= =?Windows-1252?Q?veDNn9rbuTic4A=3D=3D?= Content-Type: multipart/alternative; boundary="_000_CY5PR19MB644734C2F5D7293EC9CC6C0FAE132CY5PR19MB6447namp_" MIME-Version: 1.0 X-OriginatorOrg: sct-15-20-7741-18-msonline-outlook-c907d.templateTenant X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CY5PR19MB6447.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: f6a7cff9-f402-4f46-dec8-08dd30d03bcb X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jan 2025 17:08:27.0890 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR19MB5611 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --_000_CY5PR19MB644734C2F5D7293EC9CC6C0FAE132CY5PR19MB6447namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable assuming you are implementing kubernetes kubectl exec -it $(kubectl get pods -l app.kubernetes.io/component=3Dpgpool= ,app.kubernetes.io/name=3Dpostgresql-ha -o jsonpath=3D'{.items[0].metadata.= name}') -- pg_md5 -m --config-file=3D"/opt/bitnami/pgpool/conf/pgpool.conf"= -u "foo" "bar" //cat out pgpool afterwards pgpool: customUsers: usernames: "keycloak vkp" passwords: "my_keycloak*PWD vkp*PWD" Users and passwords are separated by a space character. ju ________________________________ From: vijay patil Sent: Thursday, January 9, 2025 12:06 AM To: pgpool-general@pgpool.net ; pgsql-general@li= sts.postgresql.org Subject: Issue with Password Authentication for Pgpool Hello Everyone, Need assistance on below requirements. My requirement is to prompt for a password when connecting through Pgpool (= port 9999) and to avoid using the pool_password file. However, I=92m curren= tly getting the error related to the lack of an entry in the pool_passwd fi= le. Could you please advise how I can achieve password authentication without u= sing the pool_password file, while ensuring that Pgpool prompts for the pas= sword during connection? Here is the relevant configuration from my pool_hba.conf: host all all 10.125.0.90/32 trust # Nod= e 1 host all all 10.125.0.91/32 trust # Nod= e 2 #host all all 10.125.0.79/32 scram-sha-256 # No= de 3 host all all 0.0.0.0/0 scram-sha-256 # All= nodes error :- [postgres@scrbtrheldbaas002 PG_DATA]$ psql -h 10.125.0.79 -U vkp -d postgre= s -p 9999 psql: error: connection to server at "10.125.0.79", port 9999 failed: FATAL= : SCRAM authentication failed DETAIL: pool_passwd file does not contain an entry for "vkp" --_000_CY5PR19MB644734C2F5D7293EC9CC6C0FAE132CY5PR19MB6447namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
assuming you are implementing kubernetes

kubectl exec -it $(kubectl get pods -l app.kubernetes.=
io/component=3Dpgpool,app.kubernetes.io/name=3Dpostgresql-ha -o jsonpath=3D=
'{.items[0].metadata.name}') -- pg_md5 -m --config-file=3D"/opt/bitnam=
i/pgpool/conf/pgpool.conf" -u "foo" "bar"


//cat out pgpool afterwards=0A=
=0A=
pgpool:=0A=
  customUsers:=0A=
    usernames: "keycloak vkp"=0A=
    passwords: "my_keycloak*PWD vkp*PWD"=0A=
Users and passwords are separated by a space character.

ju<= /div>

From: vijay = patil <vijay.postgres@gmail.com>
Sent: Thursday, January 9, 2025 12:06 AM
To: pgpool-general@pgpool.net <pgpool-general@pgpool.net>= ; pgsql-general@lists.postgresql.org <pgsql-general@lists.postgresql.org= >
Subject: Issue with Password Authentication for Pgpool
 
Hello Everyone,

Need assistance&nbs= p;on below requirements. 

My requirement is to prompt for a password whe= n connecting through Pgpool (port 9999) and to avoid using the pool_password file. However, I=92m currently getting the = error related to the lack of an entry in the pool_passwd file.

Could you please advise how I can achieve pass= word authentication without using the pool_password file, while ensuring that Pgpool prompts fo= r the password during connection?


Here is the relevant configuration from my pool_hba.conf:


host    all       &nb=
sp; all         10.125.0.90/32       tru=
st            # Node 1=0A=
host    all         all       =
  10.125.0.91/32       trust        =
;    # Node 2=0A=
#host    all         all      =
   10.125.0.79/32       scram-sha-256    # No=
de 3=0A=
host    all         all       =
  0.0.0.0/0            scram-sha-256 &nb=
sp;  # All nodes

error :-
[postgres@scrbtrheldbaas002 PG_DAT=
A]$ psql -h 10.125.0.79 -U vkp -d postgres -p 9999=0A=
psql: error: connection to server at "10.125.0.79", port 9999 fai=
led: FATAL:  SCRAM authentication failed=0A=
DETAIL:  pool_passwd file does not contain an entry for "vkp"=
;=0A=


=

--_000_CY5PR19MB644734C2F5D7293EC9CC6C0FAE132CY5PR19MB6447namp_--