Обсуждение: streaming replication authentication

Поиск
Список
Период
Сортировка

streaming replication authentication

От
Zachary Hanson-Hart
Дата:
Hi pgsql-general,

   I know that the requirement for replication is that a user be allowed to connect to the "replication" database.  My question is how to configure the streaming replication client to use a particular authentication method.  I haven't been able to find examples of streaming replication using any authentication other than trust or md5. 

Specifically, I'm interested in using kerberos (via gssapi) with a keytab.  I'm able to authenticate from the command line with gss after doing kinit, but that's not practical for replication.  Can gss authentication be used in replication?

FWIW, I'm using RedHat 7's version of Postgresql 9.2.  

Thanks for any hints or advice,

Zach

Re: streaming replication authentication

От
Stephen Frost
Дата:
Greetings,

* Zachary Hanson-Hart (zachhh@temple.edu) wrote:
>    I know that the requirement for replication is that a user be allowed to
> connect to the "replication" database.  My question is how to configure the
> streaming replication client to use a particular authentication method.  I
> haven't been able to find examples of streaming replication using any
> authentication other than trust or md5.
>
> Specifically, I'm interested in using kerberos (via gssapi) with a keytab.
> I'm able to authenticate from the command line with gss after doing kinit,
> but that's not practical for replication.  Can gss authentication be used
> in replication?

Yes, GSS auth can be used in replication.  Why do you think it's not
practical...?

> FWIW, I'm using RedHat 7's version of Postgresql 9.2.

PG 9.2 is no longer supported by this community, I strongly encourage
you to upgrade to a supported version.

Thanks!

Stephen

Вложения