[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Postgresql deying access

On 2/11/11 12:04 PM, Nicolas Barbier wrote:

>> postgres@netmon:~$ psql template1
>> psql: FATAL:  Ident authentication failed for user "postgres"
> * What does the PostgreSQL log say?

You're right (dumb me):

2011-02-11 12:12:50 CET LOG:  could not get peer credentials:
Interrupted system call
2011-02-11 12:12:50 CET FATAL:  Ident authentication failed for user

> * Does it work when you install an identd? (That shouldn't be required
> when connecting using UNIX sockets, but it may be help diagnose the
> problem; on UNIX sockets, SO_PEERCRED is supposed to be used to check
> the user's identity.)

Nothing changes.

> * Does it work when you install an identd and try to connect using TCP
> ("-h localhost")?

Simply asks for password:

postgres@netmon:~$ egrep -v "^(#|$)" /etc/inetd.conf
ident           stream  tcp     nowait  identd /usr/sbin/ident2 ident2 -i -n

Log says:
2011-02-11 12:27:46 CET LOG:  could not receive data from client:
Connection reset by peer

> * Could you paste the relevant part of pg_hba.conf? (The first non
> commented-out line should read "local all postgres ident".)

It's the default one:

root@netmon:~# egrep -v "^(#|$)" /etc/postgresql/8.4/main/pg_hba.conf
local   all         postgres                          ident
local   all         all                               ident
host    all         all          md5
host    all         all         ::1/128               md5

> I guess that something might be wrong with kFreeBSD's SO_PEERCRED (or
> its detection by the configure script).

Not skilled enough on this to give my opinion, sorry :-\

# Emanuele Balla            #                            #
# System & Network Engineer # Cell:  +39 348 7747907     #
# Spin s.r.l. - AS6734      # Phone: +39 040 9869090     #
# Trieste                   # Email: balla@staff.spin.it #

Reply to: