<div dir="ltr"><br><br><div class="gmail_quote"><div dir="ltr">On Wed, Jul 25, 2018 at 5:34 PM Tatsuo Ishii <<a href="mailto:ishii@sraoss.co.jp">ishii@sraoss.co.jp</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">>> I found that if both allow_clear_text_frontend_auth and<br>
>> enable_pool_hba are on, then nobody can connect to pgpool.<br>
>><br>
>> t-ishii@localhost: psql -p 11000 test<br>
>> psql: FATAL: client authentication failed<br>
>> DETAIL: missing or erroneous pool_hba.conf file<br>
>> HINT: see pgpool log for details<br>
>><br>
>> This is a disaster and I think It's better for pgpool to refuse<br>
>> starting. Or maybe we should ignore one of them (and start pgpool)<br>
>> What do you think?<br>
>><br>
> <br>
> You must have hit some bug. Its not intentional.<br>
> <br>
> Did you provided the valid pool_hba.conf file for this test. I have ran a<br>
> quick test<br>
> with valid pool_hba.conf and allow_clear_text_frontend_auth=on and its<br>
> working<br>
> <br>
> Can you please provide the steps to reproduce this issue.<br>
<br>
Sure.<br>
<br>
1. Run regression 020.allow_clear_text_frontend_auth test.<br>
<br>
2. cd tests/020.allow_clear_text_frontend_auth/testdir<br>
<br>
3. echo "enable_pool_hba = on" >> etc/pgpool.conf<br>
<br>
4. ./startall<br>
<br>
5. psql -p 11000 test<br>
psql: FATAL: client authentication failed<br>
DETAIL: missing or erroneous pool_hba.conf file<br>
HINT: see pgpool log for details<br></blockquote><div> </div><div><br></div><div>First of all sorry for late response, I got stuck with some high priority tasks and couldn't get the time for this.</div><div><br></div><div>Ok so I am able to reproduce the issue and the reason is pgpool_setup.sh was not placing the pool_hba.conf file in test directory</div><div>and we get the "<span style="font-size:small;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">missing or erroneous pool_hba.conf file" error by following these above mentioned steps.</span></div><div><span style="font-size:small;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">I will add the pool_setup.sh changes in the patch.</span></div><div><span style="font-size:small;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><br></span></div><div><span style="font-size:small;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">As far as the behaviour is concerned do you think we should change it. If enable_pool_hba is set to on in the configuration</span></div><div>but hba file is not found then this error is thrown. which seems to me a correct behaviour. What is your suggestion on this?</div><div><br></div><div>Thanks</div><div>Best Regards</div><div>Muhammad Usama</div><div><br></div><div><span style="font-size:small;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><br></span></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Best regards,<br>
--<br>
Tatsuo Ishii<br>
SRA OSS, Inc. Japan<br>
English: <a href="http://www.sraoss.co.jp/index_en.php" rel="noreferrer" target="_blank">http://www.sraoss.co.jp/index_en.php</a><br>
Japanese:<a href="http://www.sraoss.co.jp" rel="noreferrer" target="_blank">http://www.sraoss.co.jp</a><br>
</blockquote></div></div>