Re: Role Authentication Failure

From: Adrian Klaver <adrian(dot)klaver(at)gmail(dot)com>
To: Carlos Mennens <carlos(dot)mennens(at)gmail(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Role Authentication Failure
Date: 2013-04-15 16:26:58
Message-ID: 516C2A52.8020804@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 04/15/2013 09:10 AM, Carlos Mennens wrote:
> I'm doing this all in psql.
>
> Example:
>
> CREATE ROLE carlos LOGIN CREATEDB CREATE ROLE REPLICATION;

I going to assume you actually did:

CREATE ROLE carlos LOGIN CREATEDB CREATEROLE REPLICATION;

otherwise it would fail on the second CREATE ROLE.

>
> Then set password \password carlos
>
> Now I create the ROLE:
>
> CREATE ROLE dba NOLOGIN;
>
> So now I have two roles:
>
> -carlos = user role
> -dba = group role
>
> I can login just fine as 'carlos' now with no authentication failure.
> But when I do:
>
> GRANT dba TO carlos;
>
> That's the end of 'carlos' being able to login. What am I doing wrong?

Unfortunately I do not have a 9.1.x instance handy. I tried the above on
9.0.x and everything worked.

Could you run the above sequence and show the log information from the run?

>
> The only files I have edited in PostgreSQL post installation is
> pg_hba.conf & postgres.conf. It's a new 9.1.9 installation with no
> data yet. I just don't understand why granting a role to a user
> destroys his authentication and even REVOKE his dba group role doesn't
> fix 'carlos'.
>

--
Adrian Klaver
adrian(dot)klaver(at)gmail(dot)com

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2013-04-15 16:40:27 Re: Role Authentication Failure
Previous Message Carlos Mennens 2013-04-15 16:10:52 Re: Role Authentication Failure