<div dir="auto">LDAP authentication issue got fixed. I had issues with the backend databases and due to load balance, connections were routed standby nodes. Primary database has been attached back to pgpool and corrected standby database hba_conf file.<div dir="auto"><br></div><div dir="auto">It would be great if someone can share pgpool configurations and case studies which can be implemented in Prod environment.</div><div dir="auto"><br></div><div dir="auto">Thank you,</div><div dir="auto">Vipin </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, May 7, 2021, 4:46 PM Vipin Madhusoodanan <<a href="mailto:vipin.madhusoodanan@gmail.com">vipin.madhusoodanan@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">Hi Team,<div dir="auto"><div dir="auto"><br></div><div dir="auto">I am not able to authenticate via LDAP client authentication. LDAP authentication is working fine with out pgpool , following are the pgpool.conf client authentication and pool_hba.conf configuration details. I have compiled the pgpool source code using Open-LDAP. I am receiving the following error while connecting to database via pgpool.<br></div><div dir="auto"><div dir="auto"><div style="width:328px;margin:16px 0px"><div><div><div><p><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">psql</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> -h *****: -p **** -U ***** postgres</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Password for user *****:</span><br><font style="background-color:rgb(255,224,130)" color="#f44336"><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">psql</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">: ERROR: failed to authenticate with backend using md5</span></font><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">DETAIL: valid password not found</span></p><p><b>Platform</b> : Linux</p><p><b>OS</b>: RHEL 8.3</p><p><b>Pgpool-II version</b> : 4.2.2<br><br><b><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">pool_hba.conf</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> entry</span></b><br><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">host all all *.*.*.*/* ldap ldapserver==**** ldapport=**** ldapbasedn="dc==****,dc==****,dc</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">==****" ldapbinddn="cn==****,ou=Service Accounts,ou=Resource Accounts,dc==****,dc==****,dc==****" ldapbindpasswd="=****" ldapsearchattrib</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">ute</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">="sAMAccountName"</span><br><br><b><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">pgpool.conf</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> - Authentication section</span></b><br><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"># - Authentication -</span><br><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">enable_pool_hba</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> = on</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # Use pool_hba.conf for client authentication</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">pool_passwd</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> = ''</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # File name of pool_passwd for md5 authentication.</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # "" disables pool_passwd.</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # (change requires restart)</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">authentication_timeout</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> = 1min</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # Delay in seconds to complete client authentication</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # 0 means no timeout.</span><br><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">allow_clear_text_frontend_auth</span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> = on</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # Allow Pgpool-II to use clear text password authentication</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # with clients, when pool_passwd does not</span><br><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> # contain the user password</span></p><p> </p><p>Thank you, </p><p>Vipin </p></div></div></div></div><div style="height:0px"></div></div><br></div></div></div>
</blockquote></div>