From: | Hemil Ruparel <hemilruparel2002(at)gmail(dot)com> |
---|---|
To: | Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com> |
Cc: | "Zwettler Markus (OIZ)" <Markus(dot)Zwettler(at)zuerich(dot)ch>, "pgsql-generallists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>, Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at> |
Subject: | Re: How to debug authentication issues in Postgres |
Date: | 2020-11-27 15:20:02 |
Message-ID: | CANW1aT_zrEfYKV0O6b=i55efb+Ct0G+k8uZFNYk7-Q16oW0r7g@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
When I try to connect to the database, the log says:
> FATAL: password authentication failed for user "user"
> DETAIL: Connection matched pg_hba.conf line 88: "host user
password 0.0.0.0/0 scram-sha-256"
So I think the client is using scram-sha-256
On Fri, Nov 27, 2020 at 8:45 PM Hemil Ruparel <hemilruparel2002(at)gmail(dot)com>
wrote:
> The database has been upgraded
>
> On Fri, Nov 27, 2020 at 8:41 PM Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
> wrote:
>
>> On 11/27/20 7:01 AM, Hemil Ruparel wrote:
>> > I don't quite get what you mean by upgrading to scram-sha256. I
>> > installed postgres 13. I haven't upgraded anything yet.
>>
>> In postgresql.conf see what password_encryption has been set to. If it
>> is 'scram-sha-256` then it has been upgraded.
>>
>>
>>
>> >
>> > On Fri, Nov 27, 2020 at 8:06 PM Zwettler Markus (OIZ)
>> > <Markus(dot)Zwettler(at)zuerich(dot)ch <mailto:Markus(dot)Zwettler(at)zuerich(dot)ch>> wrote:
>> >
>> > Did you correctly upgrade your whole environment to
>> scram-sha-256?____
>> >
>> > __ __
>> >
>> > __ __
>> >
>> > <quote>
>> > To upgrade an existing installation from |md5|to |scram-sha-256|,
>> > after having ensured that all client libraries in use are new enough
>> > to support SCRAM, set |password_encryption = 'scram-sha-256'|in
>> > |postgresql.conf|, make all users set new passwords, and change the
>> > authentication method specifications in |pg_hba.conf|to
>> > |scram-sha-256|.____
>> >
>> > </quote>____
>> >
>> > __ __
>> >
>> > __ __
>> >
>> > -Markus____
>> >
>> > __ __
>> >
>> > __ __
>> >
>> > __ __
>> >
>> > *Von:*Hemil Ruparel <hemilruparel2002(at)gmail(dot)com
>> > <mailto:hemilruparel2002(at)gmail(dot)com>>
>> > *Gesendet:* Freitag, 27. November 2020 09:38
>> > *An:* Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at
>> > <mailto:laurenz(dot)albe(at)cybertec(dot)at>>
>> > *Cc:* pgsql-generallists.postgresql.org
>> > <http://pgsql-generallists.postgresql.org>
>> > <pgsql-general(at)lists(dot)postgresql(dot)org
>> > <mailto:pgsql-general(at)lists(dot)postgresql(dot)org>>
>> > *Betreff:* Re: How to debug authentication issues in Postgres____
>> >
>> > __ __
>> >
>> > The log says:____
>> >
>> > > FATAL: password authentication failed for user "centos"
>> > > DETAIL: Connection matched pg_hba.conf line 88: "host user
>> > password 0.0.0.0/0 <http://0.0.0.0/0>
>> > scram-sha-256"____
>> >
>> > __ __
>> >
>> > I can't understand where is the problem as both psql and pgadmin
>> > connect without problems using the same password____
>> >
>> > __ __
>> >
>> > On Fri, Nov 27, 2020 at 1:46 PM Hemil Ruparel
>> > <hemilruparel2002(at)gmail(dot)com <mailto:hemilruparel2002(at)gmail(dot)com>>
>> > wrote:____
>> >
>> > Sorry. This was the replication section:____
>> >
>> > local replication all
>> peer
>> > host replication all 127.0.0.1/32 <http://127.0.0.1/32>
>>
>> > scram-sha-256
>> > host replication all ::1/128
>> > scram-sha-256____
>> >
>> > __ __
>> >
>> > On Fri, Nov 27, 2020 at 1:41 PM Laurenz Albe
>> > <laurenz(dot)albe(at)cybertec(dot)at <mailto:laurenz(dot)albe(at)cybertec(dot)at>>
>> > wrote:____
>> >
>> > On Fri, 2020-11-27 at 13:34 +0530, Hemil Ruparel wrote:
>> > > I have restarted postgres quite a few times to try making
>> > configuration changes and it
>> > > is always back up. I don't know how. Feels weird to me.
>> > I didn't add the line
>> > > "local replication all". It was there by default
>> >
>> > I don't believe that.
>> >
>> > This is how it looks by default:
>> >
>> > # Allow replication connections from localhost, by a user
>> > with the
>> > # replication privilege.
>> > local replication all
>> > trust
>> > host replication all 127.0.0.1/32
>> > <http://127.0.0.1/32> trust
>> > host replication all ::1/128
>> > trust
>> >
>> > Yours,
>> > Laurenz Albe
>> > --
>> > Cybertec | https://www.cybertec-postgresql.com
>> > <https://www.cybertec-postgresql.com>____
>> >
>>
>>
>> --
>> Adrian Klaver
>> adrian(dot)klaver(at)aklaver(dot)com
>>
>
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2020-11-27 15:21:33 | Re: Problem with pg_notify / listen |
Previous Message | Hemil Ruparel | 2020-11-27 15:15:34 | Re: How to debug authentication issues in Postgres |