<div dir="ltr">Then in your pgpool.conf file just set pool_passwd=''. That should do the thing.<div><br></div><div>Regards,</div><div>Vlad</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Sep 12, 2016 at 8:57 PM, Chattopadhyay, Subhankar <span dir="ltr"><<a href="mailto:s.chattopadhyay@sap.com" target="_blank">s.chattopadhyay@sap.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Hi,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Thanks. I would definitely try this. I was thinking if it is possible to switvh off the authentication at the pgpool layer and let postgres handle that. In that
case all the request goes through pgpool, only postgres verifies them. I was trying to set enable_pool_hba = off in the pgpool.conf file.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">But with that when I try to login I get this error.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2.0pt;margin-left:0in;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif;color:black">psql: ERROR: MD5 authentication is unsupported in replication and master-slave modes.</span><span style="font-size:11.0pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2.0pt;margin-left:0in;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif;color:black">HINT: check pg_hba.conf
</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Is there a way I can set the correct configuration so that I can achieve the previously mentioned setup.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Thanks and Regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Subhankar<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Vlad Novikov [mailto:<a href="mailto:xou.slackware@gmail.com" target="_blank">xou.slackware@gmail.<wbr>com</a>]
<br>
<b>Sent:</b> Tuesday, September 13, 2016 9:14 AM</span></p><div><div class="h5"><br>
<b>To:</b> Chattopadhyay, Subhankar <<a href="mailto:s.chattopadhyay@sap.com" target="_blank">s.chattopadhyay@sap.com</a>><br>
<b>Cc:</b> <a href="mailto:pgpool-general@pgpool.net" target="_blank">pgpool-general@pgpool.net</a>; Srivastava, Nishtha <<a href="mailto:nishtha.srivastava@sap.com" target="_blank">nishtha.srivastava@sap.com</a>><br>
<b>Subject:</b> Re: [pgpool-general: 4976] pgpool handling of User through pool password<u></u><u></u></div></div><p></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">Something like this should work:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">````<u></u><u></u></p>
</div>
<p class="MsoNormal">USER=$1<u></u><u></u></p>
<div>
<p class="MsoNormal">PWD=$2<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">POOL_PASSWD="/etc/pgpool/pool_<wbr>passwd"<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">pg_md5 -m -u ${USER} -p ${PWD}<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">ENCRYPTED_PWD=$(grep ${USER} ${POOL_PASSWD} | cut -d: -f2)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">psql -U postgres -w -c "CREATE ROLE ${USER} PASSWORD '${ENCRYPTED_PWD}' CREATEDB CREATEROLE INHERIT LOGIN"<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">````<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Then you can call it ./createuser.sh joe mypassword (given the script name is createuser.sh). CREATE ROLE arguments may differ based on what permissions you want to grant.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Regards,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Vlad<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Mon, Sep 12, 2016 at 8:33 PM, Chattopadhyay, Subhankar <<a href="mailto:s.chattopadhyay@sap.com" target="_blank">s.chattopadhyay@sap.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Hi Vlad Novikov,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Thanks for your reply. As far as I know, pg_md5 is a utility to get the md5 hash of a password. Is
there any such utility/sql command to insert into pool_password also? Could you please elaborate and let me know of this?</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">How would the script/query look like from the user’s perspective?</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Thanks and Regards,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Subhankar</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Vlad Novikov [mailto:<a href="mailto:xou.slackware@gmail.com" target="_blank">xou.slackware@gmail.<wbr>com</a>]
<br>
<b>Sent:</b> Tuesday, September 13, 2016 6:21 AM<br>
<b>To:</b> Chattopadhyay, Subhankar <<a href="mailto:s.chattopadhyay@sap.com" target="_blank">s.chattopadhyay@sap.com</a>><br>
<b>Cc:</b> <a href="mailto:pgpool-general@pgpool.net" target="_blank">pgpool-general@pgpool.net</a>; Srivastava, Nishtha <<a href="mailto:nishtha.srivastava@sap.com" target="_blank">nishtha.srivastava@sap.com</a>><br>
<b>Subject:</b> Re: [pgpool-general: 4976] pgpool handling of User through pool password</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">How about just write a script that combines CREATE ROLE and pg_md5 and tell the customers to use it or call it from a web interface?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Mon, Sep 12, 2016 at 3:17 AM, Chattopadhyay, Subhankar <<a href="mailto:s.chattopadhyay@sap.com" target="_blank">s.chattopadhyay@sap.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal">Hi,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">We provide PostgreSQL as a service on cloud and manage the database cluster. We have pgpool to handle the client queries.
<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Currently, as I understand, pgpool has md5 mechanism of authentication where the PostgreSQL users will have to be added in the pool-password file.
<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Now if an application user creates any additional users from these users, these additional users are not able to connect to PostgreSQL through pgpool as the user password are not
registered in the pool password file.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Is there a way pgpool can automatically add these users to pool-password? Is there a hook available for this?<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal" style="margin-left:.25in;text-autospace:none">
<span style="color:#1f497d">Thanks</span><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Subhankar</span><u></u><u></u></p>
<p class="MsoNormal" style="margin-left:.25in;text-autospace:none">
<span style="font-size:10.0pt;color:#5f497a"> </span><u></u><u></u></p>
<p class="MsoNormal" style="margin-left:29.55pt;text-autospace:none">
<span style="font-size:10.0pt;color:#5f497a"> </span><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">______________________________<wbr>_________________<br>
pgpool-general mailing list<br>
<a href="mailto:pgpool-general@pgpool.net" target="_blank">pgpool-general@pgpool.net</a><br>
<a href="http://www.pgpool.net/mailman/listinfo/pgpool-general" target="_blank">http://www.pgpool.net/mailman/<wbr>listinfo/pgpool-general</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div></div></div>
</div>
</blockquote></div><br></div>