You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The generated postgres configuration file /etc/postgresql/8.4/main/pg_hba.conf uses ident for authentication of user accessed though unix socket, which will cause Ident authentication failed error if using specified username not added to ident map. Which means database connection will not be able to established if the web server and database server was deployed on the same node.
I am wondering whether this can be set to md5 as access over network does, which can enable authentication with username and password on unix socket.
The text was updated successfully, but these errors were encountered:
The configuration using ident for unix domain is hard coded in postgresql default template downloaded from opscode community. This line is guarantee the Chef can connect to database without password, which is described in the readme file.
The simplest workaround for this issue is adding host: localhost field in the apps using local postgresql for backend database, which should be mentioned in the document.
Specifying host: localhost helped? I had to change ident/peer to md5 manually.
By the way, this line in databox postgres recipe: {:type => 'local', :db => 'all', :user => 'all', :addr => nil, :method => 'md5'}
does nothing, see Postgres 9.1 docs:
The first record with a matching connection type, client address, requested database, and user name is used to perform authentication. There is no "fall-through" or "backup": if one record is chosen and the authentication fails, subsequent records are not considered.
The generated postgres configuration file
/etc/postgresql/8.4/main/pg_hba.conf
usesident
for authentication of user accessed though unix socket, which will causeIdent authentication failed
error if using specified username not added to ident map. Which means database connection will not be able to established if the web server and database server was deployed on the same node.I am wondering whether this can be set to
md5
as access over network does, which can enable authentication with username and password on unix socket.The text was updated successfully, but these errors were encountered: