AW: How to debug authentication issues in Postgres

Did you correctly upgrade your whole environment to scram-sha-256?

<quote>
To upgrade an existing installation from md5 to scram-sha-256, after having ensured that all client libraries in use are new enough to support SCRAM, set password_encryption = 'scram-sha-256' in postgresql.conf, make all users set new passwords, and change the authentication method specifications in pg_hba.conf to scram-sha-256.
</quote>

-Markus

Von: Hemil Ruparel <hemilruparel2002(at)gmail(dot)com>
Gesendet: Freitag, 27. November 2020 09:38
An: Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
Cc: pgsql-generallists.postgresql.org <pgsql-general(at)lists(dot)postgresql(dot)org>
Betreff: Re: How to debug authentication issues in Postgres

The log says:
> FATAL: password authentication failed for user "centos"
> DETAIL: Connection matched pg_hba.conf line 88: "host user password 0.0.0.0/0<http://0.0.0.0/0> scram-sha-256"

I can't understand where is the problem as both psql and pgadmin connect without problems using the same password

On Fri, Nov 27, 2020 at 1:46 PM Hemil Ruparel <hemilruparel2002(at)gmail(dot)com<mailto:hemilruparel2002(at)gmail(dot)com>> wrote:
Sorry. This was the replication section:
local replication all peer
host replication all 127.0.0.1/32<http://127.0.0.1/32> scram-sha-256
host replication all ::1/128 scram-sha-256

On Fri, Nov 27, 2020 at 1:41 PM Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at<mailto:laurenz(dot)albe(at)cybertec(dot)at>> wrote:
On Fri, 2020-11-27 at 13:34 +0530, Hemil Ruparel wrote:
> I have restarted postgres quite a few times to try making configuration changes and it
> is always back up. I don't know how. Feels weird to me. I didn't add the line
> "local replication all". It was there by default

I don't believe that.

This is how it looks by default:

# Allow replication connections from localhost, by a user with the
# replication privilege.
local replication all trust
host replication all 127.0.0.1/32<http://127.0.0.1/32> trust
host replication all ::1/128 trust

Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com