Re: How to debug authentication issues in Postgres

On 11/27/20 7:15 AM, Hemil Ruparel wrote:
> The database has been upgraded

Just to be clear the postgresql.conf file has:

password_encryption = scram-sha-256

set correct?

>
> On Fri, Nov 27, 2020 at 8:41 PM Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com
> <mailto:adrian(dot)klaver(at)aklaver(dot)com>> wrote:
>
> On 11/27/20 7:01 AM, Hemil Ruparel wrote:
> > I don't quite get what you mean by upgrading to scram-sha256. I
> > installed postgres 13. I haven't upgraded anything yet.
>
> In postgresql.conf see what password_encryption has been set to. If it
> is 'scram-sha-256` then it has been upgraded.
>
>
>
> >
> > On Fri, Nov 27, 2020 at 8:06 PM Zwettler Markus (OIZ)
> > <Markus(dot)Zwettler(at)zuerich(dot)ch <mailto:Markus(dot)Zwettler(at)zuerich(dot)ch>
> <mailto:Markus(dot)Zwettler(at)zuerich(dot)ch
> <mailto:Markus(dot)Zwettler(at)zuerich(dot)ch>>> wrote:
> >
> >     Did you correctly upgrade your whole environment to
> scram-sha-256?____
> >
> >     __ __
> >
> >     __ __
> >
> >     <quote>
> >     To upgrade an existing installation from |md5|to |scram-sha-256|,
> >     after having ensured that all client libraries in use are new
> enough
> >     to support SCRAM, set |password_encryption = 'scram-sha-256'|in
> >     |postgresql.conf|, make all users set new passwords, and
> change the
> >     authentication method specifications in |pg_hba.conf|to
> >     |scram-sha-256|.____
> >
> >     </quote>____
> >
> >     __ __
> >
> >     __ __
> >
> >     -Markus____
> >
> >     __ __
> >
> >     __ __
> >
> >     __ __
> >
> >     *Von:*Hemil Ruparel <hemilruparel2002(at)gmail(dot)com
> <mailto:hemilruparel2002(at)gmail(dot)com>
> >     <mailto:hemilruparel2002(at)gmail(dot)com
> <mailto:hemilruparel2002(at)gmail(dot)com>>>
> >     *Gesendet:* Freitag, 27. November 2020 09:38
> >     *An:* Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at
> <mailto:laurenz(dot)albe(at)cybertec(dot)at>
> >     <mailto:laurenz(dot)albe(at)cybertec(dot)at
> <mailto:laurenz(dot)albe(at)cybertec(dot)at>>>
> >     *Cc:* pgsql-generallists.postgresql.org
> <http://pgsql-generallists.postgresql.org>
> >     <http://pgsql-generallists.postgresql.org
> <http://pgsql-generallists.postgresql.org>>
> >     <pgsql-general(at)lists(dot)postgresql(dot)org
> <mailto:pgsql-general(at)lists(dot)postgresql(dot)org>
> >     <mailto:pgsql-general(at)lists(dot)postgresql(dot)org
> <mailto:pgsql-general(at)lists(dot)postgresql(dot)org>>>
> >     *Betreff:* Re: How to debug authentication issues in Postgres____
> >
> >     __ __
> >
> >     The log says:____
> >
> >      > FATAL:  password authentication failed for user "centos"
> >      > DETAIL:  Connection matched pg_hba.conf line 88: "host
> user
> >          password 0.0.0.0/0 <http://0.0.0.0/0> <http://0.0.0.0/0
> <http://0.0.0.0/0>>
> >     scram-sha-256"____
> >
> >     __ __
> >
> >     I can't understand where is the problem as both psql and pgadmin
> >     connect without problems using the same password____
> >
> >     __ __
> >
> >     On Fri, Nov 27, 2020 at 1:46 PM Hemil Ruparel
> >     <hemilruparel2002(at)gmail(dot)com
> <mailto:hemilruparel2002(at)gmail(dot)com>
> <mailto:hemilruparel2002(at)gmail(dot)com <mailto:hemilruparel2002(at)gmail(dot)com>>>
> >     wrote:____
> >
> >         Sorry. This was the replication section:____
> >
> >         local   replication     all
>       peer
> >         host    replication     all 127.0.0.1/32
> <http://127.0.0.1/32> <http://127.0.0.1/32 <http://127.0.0.1/32>>
> >                   scram-sha-256
> >         host    replication     all             ::1/128
> >         scram-sha-256____
> >
> >         __ __
> >
> >         On Fri, Nov 27, 2020 at 1:41 PM Laurenz Albe
> >         <laurenz(dot)albe(at)cybertec(dot)at
> <mailto:laurenz(dot)albe(at)cybertec(dot)at> <mailto:laurenz(dot)albe(at)cybertec(dot)at
> <mailto:laurenz(dot)albe(at)cybertec(dot)at>>>
> >         wrote:____
> >
> >             On Fri, 2020-11-27 at 13:34 +0530, Hemil Ruparel wrote:
> >              > I have restarted postgres quite a few times to try
> making
> >             configuration changes and it
> >              >  is always back up. I don't know how. Feels weird
> to me.
> >             I didn't add the line
> >              >  "local replication all". It was there by default
> >
> >             I don't believe that.
> >
> >             This is how it looks by default:
> >
> >             # Allow replication connections from localhost, by a user
> >             with the
> >             # replication privilege.
> >             local   replication     all
> >                 trust
> >             host    replication     all 127.0.0.1/32
> <http://127.0.0.1/32>
> >             <http://127.0.0.1/32 <http://127.0.0.1/32>>
>   trust
> >             host    replication     all             ::1/128
> >                 trust
> >
> >             Yours,
> >             Laurenz Albe
> >             --
> >             Cybertec | https://www.cybertec-postgresql.com
> <https://www.cybertec-postgresql.com>
> >             <https://www.cybertec-postgresql.com
> <https://www.cybertec-postgresql.com>>____
> >
>
>
> --
> Adrian Klaver
> adrian(dot)klaver(at)aklaver(dot)com <mailto:adrian(dot)klaver(at)aklaver(dot)com>
>

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com