<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I'm using "password" authentication. As in the password is sent as clear text (inside SSL) to pgpool and then on to postgres. This is a valid option instead of "trust", "md5", etc. And it is working from the same network, just not from other networks.</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div></div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<div>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<font face="Arial, serif"><font color="#000000"><b><font color="#000000"><font size="2" style="font-size:10pt">Jon Schewe</font></font></b></font></font></p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<font face="Arial, serif"><font color="#000000"><font size="2" style="font-size:9pt">Principal Software Systems Technologist</font></font></font></p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<font face="Arial, serif"><font color="#000000"><font color="#c00000"><font size="2" style="font-size:9pt"><b><br>
</b></font></font></font><font color="#000000"><font size="2" style="font-size:9pt">C: +1 612.263.2718<br>
</font></font></font></p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<font face="Arial, serif"><font color="#000000"><font size="2" style="font-size:9pt">O: +1 952.545.5720</font></font></font></p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<font face="Arial, serif"><font color="#0563c1"><font size="2"><u>jon.schewe@raytheon.com</u></font></font></font></p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0.08in; margin-bottom:0.11in; line-height:100%">
<font face="Arial, serif"><font size="3" style="font-size:12pt"><font color="#000000"><font color="#c00000"><font size="2" style="font-size:9pt"><span lang="fr-BE"><b><br>
</b></span></font></font></font><font color="#000000"><font color="#ce1126"><font size="2" style="font-size:10pt"><span lang="fr-BE"><b>Raytheon Technologies</b></span></font></font></font></font></font></p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<font face="Arial, serif"><font size="3" style="font-size:12pt"><font color="#000000"><font size="2" style="font-size:9pt">Raytheon Intelligence & Space</font></font></font></font></p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<font face="Arial, serif"><font size="3" style="font-size:12pt"><font color="#000000"><font size="2" style="font-size:9pt">5775 Wayzata Blvd. Suite 630</font></font></font></font></p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<font face="Arial, serif"><font size="3" style="font-size:12pt"><font color="#000000"><font size="2" style="font-size:9pt">St. Louis Park, MN 55416</font></font></font></font>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:110%">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-bottom:0in; line-height:120%">
<font face="Arial, serif"><font size="3" style="font-size:12pt"><font color="#0563c1"><u><a href="https://www.rtx.com/" style="color:rgb(5,99,193)"><font color="#000000"><font size="1" style="font-size:8pt">RTX.com</font></font></a></u></font><font color="#000000"><font color="#000000"><font size="1" style="font-size:8pt"><span style="text-decoration:none">
</span></font></font></font><font color="#ce1126"><font size="2" style="font-size:9pt">|</font></font><font color="#ce1126"><font size="1" style="font-size:8pt">
</font></font><font color="#0563c1"><u><a href="https://www.linkedin.com/company/raytheontechnologies" style="color:rgb(5,99,193)"><font color="#000000"><font size="1" style="font-size:8pt">LinkedIn</font></font></a></u></font><font color="#000000"><font color="#ce1126"><font size="1" style="font-size:8pt"><span style="text-decoration:none">
</span></font></font></font><font color="#ce1126"><font size="2" style="font-size:9pt">|</font></font><font color="#ce1126"><font size="1" style="font-size:8pt">
</font></font><font color="#0563c1"><u><a href="https://twitter.com/raytheontech" style="color:rgb(5,99,193)"><font color="#000000"><font size="1" style="font-size:8pt">Twitter</font></font></a></u></font><font color="#000000"><font color="#ce1126"><font size="1" style="font-size:8pt"><span style="text-decoration:none">
</span></font></font></font><font color="#ce1126"><font size="2" style="font-size:9pt">|</font></font><font color="#ce1126"><font size="1" style="font-size:8pt">
</font></font><font color="#0563c1"><u><a href="https://www.instagram.com/raytheontechnologies" style="color:rgb(5,99,193)"><font color="#000000"><font size="1" style="font-size:8pt">Instagram</font></font></a></u></font><font color="#000000"><font color="#ce1126"><font size="1" style="font-size:8pt"><span style="text-decoration:none">
</span></font></font></font></font></font></p>
<br>
</div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Wolf Schwurack <wolf@uen.org><br>
<b>Sent:</b> Wednesday, December 8, 2021 09:34<br>
<b>To:</b> Jon SCHEWE <jon.schewe@raytheon.com>; Bo Peng <pengbo@sraoss.co.jp><br>
<b>Cc:</b> pgpool-general@pgpool.net <pgpool-general@pgpool.net><br>
<b>Subject:</b> [External] Re: [pgpool-general: 7920] Re: Problem using password authentication</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">First of all you don't put the password in pool_hba.conf this should 'trust, md5 etc. Password are encrypted in pool_passwd. If you read the documents it going over all of this<br>
<br>
Wolf<br>
<br>
On 12/8/21, 8:24 AM, "pgpool-general on behalf of Jon SCHEWE" <pgpool-general-bounces@pgpool.net on behalf of jon.schewe@raytheon.com> wrote:<br>
<br>
> > I'm using password authentication over SSL. This works fine with connections from the same network, but doesn't work with connections from another network. Can anyone explain why this isn't working?<br>
> ><br>
> > in pgpool.conf:<br>
> > enable_pool_hba = on<br>
> > pool_passwd = ''<br>
> ><br>
> ><br>
> > in pool_hba.conf:<br>
> > # "local" is for Unix domain socket connections only<br>
> > local all all trust<br>
> > # IPv4 local connections:<br>
> > host all all 127.0.0.1/32 trust<br>
> > host all all ::1/128 trust<br>
> ><br>
> > hostssl all all 0.0.0.0/0 password<br>
> ><br>
> > log output:<br>
> > Dec 7 16:20:59 psql-01 pgpool[1085857]: 2021-12-07 16:20:59: pid 1102488: WARNING: unable to get password, password file descriptor is NULL<br>
> > Dec 7 16:20:59 psql-01 pgpool[1085857]: 2021-12-07 16:20:59: pid 1102488: FATAL: client authentication failed<br>
> > Dec 7 16:20:59 psql-01 pgpool[1085857]: 2021-12-07 16:20:59: pid 1102488: DETAIL: no pool_hba.conf entry for host "XXX.XXX.XXX.XXX", user "", database "", SSL off<br>
> <br>
> I am wondering why the "user" and "database" are blank.<br>
> Can you connect to PostgreSQL from another network?<br>
<br>
Our firewall limits access to PostgreSQL from other networks to prevent applications from connecting to the individual instances rather than pgpool.<br>
<br>
My pg_hba.conf for PostgreSQL limits connections to the pgpool hosts. In this case the pgpool virtual IP is 192.1.213.40 and the 3 hosts are allowed to connect to PostgreSQL directly.<br>
<br>
hostssl all all 192.1.213.41/32 password<br>
hostssl all all 192.1.213.42/32 password<br>
hostssl all all 192.1.213.43/32 password<br>
_______________________________________________<br>
pgpool-general mailing list<br>
pgpool-general@pgpool.net<br>
<a href="http://www.pgpool.net/mailman/listinfo/pgpool-general">http://www.pgpool.net/mailman/listinfo/pgpool-general</a><br>
<br>
</div>
</span></font></div>
</body>
</html>