Обсуждение: "IDENT authentication failed for user" on 7.2.1 but not on 7.1.3

I don't know if this is a bug with PostgreSQL or perhaps
something changed with RedHat 7.3
My application failed on RH 7.3, but worked fine on RH 7.2 & 7.1.
PostgreSQL 7.2.1 produced the following error message:
'FATAL 1:  IDENT authentication failed for user "apache"'
but worked okay on PostgreSQL 7.1.3.

Two examples are provided below which demonstrate the problem:
              1) NOT okay on RH 7.3, and
              2) okay on RH 7.2

1. NOT OKAY ON RH 7.3
*
* $ psql --version
* psql (PostgreSQL) 7.2.1
*
* $ psql octave
* Welcome to psql, the PostgreSQL interactive terminal.
* ...
*
* octave=# \z
* Access privileges for database "octave"
*  Table |       Access privileges
* -------+--------------------------------
*  form  | {=,postgres=arwdRxt,apache=rw}
*  use   | {=,postgres=arwdRxt,apache=rw}
* (2 rows)
*
* octave=# \q
* $ psql -U apache octave
* psql: FATAL 1:  IDENT authentication failed for user "apache"


2. OKAY ON RH 7.2
**
** $ psql --version
** psql (PostgreSQL) 7.1.3
**
** $ psql octave
** Welcome to psql, the PostgreSQL interactive terminal.
** ...
**
** octave=# \z
**    Access permissions for database "octave"
**  Relation |        Access permissions
** ----------+-----------------------------------
**  form     | {"=","postgres=arwR","apache=rw"}
**  use      | {"=","postgres=arwR","apache=rw"}
** (2 rows)
**
** octave=# \q
** $ psql -U apache octave
** Welcome to psql, the PostgreSQL interactive terminal.
** ...

Any help will be appreciated.
Thanks,
Steve Barker
barkerds@snybufaf.buffalostate.edu
Buffalo State College

Barker <barkerds@snybufaf.buffalostate.edu> writes:
> I don't know if this is a bug with PostgreSQL or perhaps
> something changed with RedHat 7.3
> My application failed on RH 7.3, but worked fine on RH 7.2 & 7.1.
> PostgreSQL 7.2.1 produced the following error message:
> 'FATAL 1:  IDENT authentication failed for user "apache"'
> but worked okay on PostgreSQL 7.1.3.

So are you running an ident server on the RH 7.3 system?

Also, I wonder about environment variables --- like PGHOST ---
not to mention whether you have comparable pg_hba.conf files
on both setups.  PG 7.1 did not support IDENT auth on local
connections, so either you weren't actually running IDENT on
that 7.1 setup, or you had "PGHOST=localhost" or some other
hidden method of causing the connection to be TCP not Unix-socket.

            regards, tom lane

Thanks Tom, my problem was resolved by changing pg_hba.conf to:
local        all                                           trust

This line was provided by default in RedHat 7.2, but it is commented
out in RedHat 7.3.

This permission sounds quite liberal.
Perhaps someone can suggest a more-desirable replacement if I only
want an apache user from the internet in addition to the postgres
superuser.

Thanks,
Steve Barker


On Wed, 7 Aug 2002, Tom Lane wrote:

> Barker <barkerds@snybufaf.buffalostate.edu> writes:
> > I don't know if this is a bug with PostgreSQL or perhaps
> > something changed with RedHat 7.3
> > My application failed on RH 7.3, but worked fine on RH 7.2 & 7.1.
> > PostgreSQL 7.2.1 produced the following error message:
> > 'FATAL 1:  IDENT authentication failed for user "apache"'
> > but worked okay on PostgreSQL 7.1.3.
>
> So are you running an ident server on the RH 7.3 system?
>
> Also, I wonder about environment variables --- like PGHOST ---
> not to mention whether you have comparable pg_hba.conf files
> on both setups.  PG 7.1 did not support IDENT auth on local
> connections, so either you weren't actually running IDENT on
> that 7.1 setup, or you had "PGHOST=localhost" or some other
> hidden method of causing the connection to be TCP not Unix-socket.
>
>             regards, tom lane
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org
>