<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>All;</p>
<p>I have setup authentication where I have an md5 line in the
pool_hba.conf file for a user and I have an md5 password entry for
the user in the pool_passwd file, and the backend db is using
scram_sha_256 <br>
</p>
<p>I would like to setup the pool users to use scram sha 256 as
well. I see in the docs that I should use pg_enc to create the
entry in the pool_passwd file, however pg_enc is complaining about
a key file.</p>
<p>I do not understand where I should put the keyfile and what I
should put in the keyfile.</p>
<p>I assume that AES is the same as scram sha 256?<br>
</p>
<p>I see this in the docs:</p>
<p> <font color="#813d9c">If you have <tt class="LITERAL">AES</tt>
encrypted passwords stored in the <a
href="https://www.pgpool.net/docs/latest/en/html/runtime-config-connection.html#GUC-POOL-PASSWD">pool_passwd</a>
file, then <span class="PRODUCTNAME">Pgpool-II</span> will
require the decryption key to decrypt the passwords before using
them, <span class="PRODUCTNAME">Pgpool-II</span> tries to read
the decryption key at startup from the <tt class="FILENAME">.pgpoolkey</tt>
file. <tt class="FILENAME">.pgpoolkey</tt> is a plain text file
which contains the decryption key string. </font></p>
<p><font color="#813d9c"> By default the <span class="PRODUCTNAME">Pgpool-II</span>
will look for the <tt class="FILENAME">.pgpoolkey</tt> file in
the user's home directory or the file referenced by environment
variable <tt class="LITERAL">PGPOOLKEYFILE</tt>. You can also
specify the key file using the (-k, --key-file=KEY_FILE) command
line argument to the <a
href="https://www.pgpool.net/docs/latest/en/html/pgpool.html">pgpool</a>
command. The permissions on .pgpoolkey must disallow any access
to world or group. Change the file permissions by the command <tt
class="COMMAND">chmod 0600 ~/.pgpoolkey</tt>. </font></p>
<p></p>
<p><br>
but I am still un-sure what I put in the keyfile</p>
<p><br>
</p>
<p>Thanks in advance<br>
</p>
<p><br>
</p>
<p><br>
</p>
</body>
</html>