View Issue Details

IDProjectCategoryView StatusLast Update
0000708Pgpool-IIGeneralpublic2022-06-28 11:27
Reportervipinmv Assigned Tohoshiai  
PrioritynormalSeverityfeatureReproducibilityalways
Status closedResolutionopen 
PlatformLinux 7OSRHELOS Version8.3
Product Version4.2.2 
Summary0000708: Unable to setup LDAP Client Authentication using pgpool-II
DescriptionI am not able to authenticate via LDAP client authentication. LDAP authentication is working fine with out pgpool , following are the pgpool.conf client authentication and pool_hba.conf configuration details. I have compiled the pgpool source code using Open-LDAP. I am receiving the following error while connecting to database via pgpool.

psql -h *****: -p **** -U ***** postgres
Password for user *****:
psql: ERROR: failed to authenticate with backend using md5
DETAIL: valid password not found

pool_hba.conf entry

host all all *.*.*.*/* ldap ldapserver==**** ldapport=**** ldapbasedn="dc==****,dc==****,dc
==****" ldapbinddn="cn==****,ou=Service Accounts,ou=Resource Accounts,dc==****,dc==****,dc==****" ldapbindpasswd="=****" ldapsearchattrib
ute="sAMAccountName"

pgpool.conf - Authentication section

# - Authentication -

enable_pool_hba = on
                                   # Use pool_hba.conf for client authentication
pool_passwd = ''
                                   # File name of pool_passwd for md5 authentication.
                                   # "" disables pool_passwd.
                                   # (change requires restart)
authentication_timeout = 1min
                                   # Delay in seconds to complete client authentication
                                   # 0 means no timeout.

allow_clear_text_frontend_auth = on
                                   # Allow Pgpool-II to use clear text password authentication
                                   # with clients, when pool_passwd does not
                                   # contain the user password
Steps To ReproduceConnect to the database using pgpool using this LDAP configuration, its throwing out the error and can be reproduced by new connection attempt.
TagsAuthentication, LDAP, pgpool-II

Activities

vipinmv

2021-05-01 03:01

reporter   ~0003826

Any help on this issue is highly appreciated. This is blocking our Migration of Authentication from MD5 to LDAP

hoshiai

2021-05-09 17:51

developer   ~0003828

Hi,
This error is happend by password is not found for postgres authentication. Which authentication and password do you want to use with postgres authentication?

Currently, pgpool support only authentication between client and pgpool, so LDAP authentication is not used between pgpool and postgres. If you want to use a same password which LDAP auth use, you add the following to pool_hba.conf entry of LDAP.
  backend_use_passwd=1

reference document is:
https://www.pgpool.net/docs/latest/en/html/auth-methods.html#AUTH-LDAP

administrator

2021-07-05 13:26

administrator   ~0003895

Have you resolved this issue?
May I close this issue?

Issue History

Date Modified Username Field Change
2021-04-28 07:55 vipinmv New Issue
2021-04-28 07:55 vipinmv Tag Attached: Authentication
2021-04-28 07:55 vipinmv Tag Attached: LDAP
2021-04-28 07:55 vipinmv Tag Attached: pgpool-II
2021-05-01 03:01 vipinmv Note Added: 0003826
2021-05-06 09:33 administrator Assigned To => hoshiai
2021-05-06 09:33 administrator Status new => assigned
2021-05-09 17:51 hoshiai Note Added: 0003828
2021-05-09 17:51 hoshiai Status assigned => feedback
2021-07-05 13:26 administrator Note Added: 0003895
2022-06-28 11:27 administrator Status feedback => closed