Re: streaming replication authentication

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: Zachary Hanson-Hart <zachhh(at)temple(dot)edu>
Cc: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: streaming replication authentication
Date: 2019-02-22 23:09:53
Message-ID: 20190222230953.GC6197@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Greetings,

* Zachary Hanson-Hart (zachhh(at)temple(dot)edu) wrote:
> I know that the requirement for replication is that a user be allowed to
> connect to the "replication" database. My question is how to configure the
> streaming replication client to use a particular authentication method. I
> haven't been able to find examples of streaming replication using any
> authentication other than trust or md5.
>
> Specifically, I'm interested in using kerberos (via gssapi) with a keytab.
> I'm able to authenticate from the command line with gss after doing kinit,
> but that's not practical for replication. Can gss authentication be used
> in replication?

Yes, GSS auth can be used in replication. Why do you think it's not
practical...?

> FWIW, I'm using RedHat 7's version of Postgresql 9.2.

PG 9.2 is no longer supported by this community, I strongly encourage
you to upgrade to a supported version.

Thanks!

Stephen

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Lukáš Sobotka 2019-02-23 21:28:01 Foreign table & Connection reset by peer
Previous Message Thomas Munro 2019-02-22 21:46:32 Re: WSL (windows subsystem on linux) users will need to turn fsync off as of 11.2