Re: How to debug authentication issues in Postgres

I don't quite get what you mean by upgrading to scram-sha256. I installed
postgres 13. I haven't upgraded anything yet.

On Fri, Nov 27, 2020 at 8:06 PM Zwettler Markus (OIZ) <
Markus(dot)Zwettler(at)zuerich(dot)ch> wrote:

> Did you correctly upgrade your whole environment to scram-sha-256?
>
>
>
>
>
> <quote>
> To upgrade an existing installation from md5 to scram-sha-256, after
> having ensured that all client libraries in use are new enough to support
> SCRAM, set password_encryption = 'scram-sha-256' in postgresql.conf, make
> all users set new passwords, and change the authentication method
> specifications in pg_hba.conf to scram-sha-256.
>
> </quote>
>
>
>
>
>
> -Markus
>
>
>
>
>
>
>
> *Von:* Hemil Ruparel <hemilruparel2002(at)gmail(dot)com>
> *Gesendet:* Freitag, 27. November 2020 09:38
> *An:* Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
> *Cc:* pgsql-generallists.postgresql.org <
> pgsql-general(at)lists(dot)postgresql(dot)org>
> *Betreff:* Re: How to debug authentication issues in Postgres
>
>
>
> The log says:
>
> > FATAL: password authentication failed for user "centos"
> > DETAIL: Connection matched pg_hba.conf line 88: "host user
> password 0.0.0.0/0 scram-sha-256"
>
>
>
> I can't understand where is the problem as both psql and pgadmin connect
> without problems using the same password
>
>
>
> On Fri, Nov 27, 2020 at 1:46 PM Hemil Ruparel <hemilruparel2002(at)gmail(dot)com>
> wrote:
>
> Sorry. This was the replication section:
>
> local replication all peer
> host replication all 127.0.0.1/32
> scram-sha-256
> host replication all ::1/128
> scram-sha-256
>
>
>
> On Fri, Nov 27, 2020 at 1:41 PM Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
> wrote:
>
> On Fri, 2020-11-27 at 13:34 +0530, Hemil Ruparel wrote:
> > I have restarted postgres quite a few times to try making configuration
> changes and it
> > is always back up. I don't know how. Feels weird to me. I didn't add
> the line
> > "local replication all". It was there by default
>
> I don't believe that.
>
> This is how it looks by default:
>
> # Allow replication connections from localhost, by a user with the
> # replication privilege.
> local replication all trust
> host replication all 127.0.0.1/32 trust
> host replication all ::1/128 trust
>
> Yours,
> Laurenz Albe
> --
> Cybertec | https://www.cybertec-postgresql.com
>
>