pg.ddx.io pgsql-sql@postgresql.org mailing list archive
help / color / mirror / Atom feedChanging auth type in pg_hba.conf ineffective. Why?
5+ messages / 3 participants
[nested] [flat]
* Changing auth type in pg_hba.conf ineffective. Why?
@ 2005-11-24 21:18 Bryce Nesbitt <bryce1@obviously.com>
0 siblings, 2 replies; 5+ messages in thread
From: Bryce Nesbitt @ 2005-11-24 21:18 UTC (permalink / raw)
To: pgsql-sql
I'm struggling to resolve a login error. It seems that I'm getting
"ident" authentication, no mater what I set pg_hba.conf to. Here's a
log file:
LOG: next transaction ID: 602; next OID: 17232
LOG: database system is ready
...
FATAL: Ident authentication failed for user "bryce"
LOG: could not connect to Ident server at address "::1", port 113:
Connection refused
This makes sense, because no identd is running, and port 113 is blocked
anyway. So I need another auth method.
My relevant pg_hba.conf lines are:
#local all all ident sameuser
#host all all 127.0.0.1/32 ident sameuser
#host all all ::1/128 ident sameuser
local all all md5
host all all 127.0.0.1/32 trust
host all all ::1/128 md5
I've renamed pg_hba.conf temporarily, just to verify that postmaster
won't start without it. So I'm editing the right file, and restarting
postmaster correctly. Any clues why I'm still getting 'auth' method
authentication?
Environment:
I'm using JDBC (Java Database Connection)
PostgreSQL version 8.0.3
SUSE Linux 10.0
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Changing auth type in pg_hba.conf ineffective. Why?
@ 2005-11-25 02:32 Alvaro Herrera <alvherre@commandprompt.com>
parent: Bryce Nesbitt <bryce1@obviously.com>
1 sibling, 1 reply; 5+ messages in thread
From: Alvaro Herrera @ 2005-11-25 02:32 UTC (permalink / raw)
To: Bryce Nesbitt <bryce1@obviously.com>; +Cc: pgsql-sql
Bryce Nesbitt wrote:
> I've renamed pg_hba.conf temporarily, just to verify that postmaster
> won't start without it. So I'm editing the right file, and restarting
> postmaster correctly. Any clues why I'm still getting 'auth' method
> authentication?
What message do you get if you try to connect while postmaster is down?
I'm just trying to make sure you are connecting to the postmaster you
think you are ...
--
Alvaro Herrera http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Changing auth type in pg_hba.conf ineffective. Why?
@ 2005-11-25 02:41 Tom Lane <tgl@sss.pgh.pa.us>
parent: Bryce Nesbitt <bryce1@obviously.com>
1 sibling, 1 reply; 5+ messages in thread
From: Tom Lane @ 2005-11-25 02:41 UTC (permalink / raw)
To: Bryce Nesbitt <bryce1@obviously.com>; +Cc: pgsql-sql
Bryce Nesbitt <bryce1@obviously.com> writes:
> I've renamed pg_hba.conf temporarily, just to verify that postmaster
> won't start without it. So I'm editing the right file, and restarting
> postmaster correctly. Any clues why I'm still getting 'auth' method
> authentication?
Well, have you checked that you're connecting to the same postmaster
you're restarting?
After that, I'd ask to see the whole pg_hba.conf and not just the part
you think is relevant ;-)
FWIW, the log message suggests that the connection is coming across
IPv6, so you need to look at the IPv6 entries in pg_hba.conf.
regards, tom lane
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Changing auth type in pg_hba.conf ineffective. Why?
@ 2005-11-25 06:35 Bryce Nesbitt <bryce1@obviously.com>
parent: Alvaro Herrera <alvherre@commandprompt.com>
0 siblings, 0 replies; 5+ messages in thread
From: Bryce Nesbitt @ 2005-11-25 06:35 UTC (permalink / raw)
To: pgsql-sql; +Cc: Alvaro Herrera <alvherre@commandprompt.com>
In that case I get:
***Exception:
org.postgresql.util.PSQLException: Connection refused. Check that the
hostname and port are correct and that the postmaster is accepting
TCP/IP connections
Alvaro Herrera wrote:
> What message do you get if you try to connect while postmaster is down?
> I'm just trying to make sure you are connecting to the postmaster you
> think you are ...
>
>> Bryce Nesbitt:
>> I've renamed pg_hba.conf temporarily, just to verify that postmaster
>> won't start without it. So I'm editing the right file, and restarting
>> postmaster correctly. Any clues why I'm still getting 'auth' method
>> authentication?
>>
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Changing auth type in pg_hba.conf ineffective. Why?
@ 2005-11-25 07:01 Bryce Nesbitt <bryce1@obviously.com>
parent: Tom Lane <tgl@sss.pgh.pa.us>
0 siblings, 0 replies; 5+ messages in thread
From: Bryce Nesbitt @ 2005-11-25 07:01 UTC (permalink / raw)
To: Tom Lane <tgl@sss.pgh.pa.us>; pgsql-sql
IPv6?
Really?
That new fangled thing?
That's enabled on my machine by default?
Whadda know.
That's it.
Thanks.
Tom Lane wrote:
> Bryce Nesbitt <bryce1@obviously.com> writes:
>
>> I've renamed pg_hba.conf temporarily, just to verify that postmaster
>> won't start without it. So I'm editing the right file, and restarting
>> postmaster correctly. Any clues why I'm still getting 'auth' method
>> authentication?
>>
>
> Well, have you checked that you're connecting to the same postmaster
> you're restarting?
>
> After that, I'd ask to see the whole pg_hba.conf and not just the part
> you think is relevant ;-)
>
> FWIW, the log message suggests that the connection is coming across
> IPv6, so you need to look at the IPv6 entries in pg_hba.conf.
>
> regards, tom lane
>
^ permalink raw reply [nested|flat] 5+ messages in thread
end of thread, other threads:[~2005-11-25 07:01 UTC | newest]
Thread overview: 5+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2005-11-24 21:18 Changing auth type in pg_hba.conf ineffective. Why? Bryce Nesbitt <bryce1@obviously.com>
2005-11-25 02:32 ` Alvaro Herrera <alvherre@commandprompt.com>
2005-11-25 06:35 ` Bryce Nesbitt <bryce1@obviously.com>
2005-11-25 02:41 ` Re: Changing auth type in pg_hba.conf ineffective. Why? Tom Lane <tgl@sss.pgh.pa.us>
2005-11-25 07:01 ` Re: Changing auth type in pg_hba.conf ineffective. Why? Bryce Nesbitt <bryce1@obviously.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox