[Pgpool-general] authentication problems

[Daniel Codina]

I've been playing a bit with pgpool-postgres authentication.

As I read, the only possible authentication methods are : trust, password
and PAM, is it right?

To use trust,.. well, to have a postrgresql server completely trusted is not
a good practice. I've been avoiding the use of PAM but, it seems to me that
it is not possible to work well neither with "password".
I don't know if I am missing something (it could be), but it seems to me
that, with "password authenticacion method", it si possible the replication,
but not the recovery. If I try it I am allways getting:


2010-04-12 15:46:01 DEBUG: pid 4521: starting health checking
2010-04-12 15:46:01 DEBUG: pid 4521: health_check: 0 th DB node status: 1
2010-04-12 15:46:01 DEBUG: pid 4521: health_check: 1 th DB node status: 3
2010-04-12 15:46:01 DEBUG: pid 4527: I am PCP 4527 accept fd 5
2010-04-12 15:46:01 DEBUG: pid 4527: pcp_child: received PCP packet type of
service 'M'
2010-04-12 15:46:01 DEBUG: pid 4527: pcp_child: salt sent to the client
2010-04-12 15:46:01 DEBUG: pid 4527: pcp_child: received PCP packet type of
service 'R'
2010-04-12 15:46:01 DEBUG: pid 4527: pcp_child: authentication OK
2010-04-12 15:46:01 DEBUG: pid 4527: pcp_child: received PCP packet type of
service 'O'
2010-04-12 15:46:01 DEBUG: pid 4527: pcp_child: start online recovery
2010-04-12 15:46:01 LOG:   pid 4527: starting recovering node 1
2010-04-12 15:46:01 ERROR: pid 4527: start_recover: could not connect master
node.
2010-04-12 15:46:01 DEBUG: pid 4527: pcp_child: received PCP packet type of
service 'X'
2010-04-12 15:46:01 DEBUG: pid 4527: pcp_child: client disconnecting. close
connection
2010-04-12 15:46:02 DEBUG: pid 4521: starting health checking
2010-04-12 15:46:02 DEBUG: pid 4521: health_check: 0 th DB node status: 1
2010-04-12 15:46:02 DEBUG: pid 4521: health_check: 1 th DB node status: 3
2010-04-12 15:46:03 DEBUG: pid 4521: starting health checking
2010-04-12 15:46:03 DEBUG: pid 4521: health_check: 0 th DB node status: 1
2010-04-12 15:46:03 DEBUG: pid 4521: health_check: 1 th DB node status: 3


The important line is:
start_recover: could not connect master node.

The 2 backends I have running (their IPs) are with "password" authentication
method in "pg_hba.conf" (and "trust" in pool_hba.conf).

This is the problem, because, just changeing the "password" for the
undesired "trust" it works perfectly.

So my question: Is it possible to recover (pcp_recovery_node) with "password
method" ? If it is not.... is it possible to do so with PAM? or, is just
possible with "trust" ?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://pgfoundry.org/pipermail/pgpool-general/attachments/20100412/5be63e0a/attachment.html>