Обсуждение: BUG #16736: SCRAM authentication is not supported by this driver

The following bug has been logged on the website:

Bug reference:      16736
Logged by:          Walter Weinmann
Email address:      walter@konnexions.ch
PostgreSQL version: 13.1
Operating system:   Windows 10
Description:

Version 13 was fine, but now with version 13.1 (via Docker image
postgres:13.1-alpine) and postgresql-42.2.18.jar I get:

Nov. 21, 2020 6:26:36 AM org.postgresql.core.v3.ConnectionFactoryImpl log
WARNING: SQLException occurred while connecting to localhost:5432
org.postgresql.util.PSQLException: SCRAM authentication is not supported by
this driver. You need JDK >= 8 and pgjdbc >= 42.2.0 (not ".jre" versions)
        at
org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:625)
        at
org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:205)
        at
org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49)
        at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:195)
        at org.postgresql.Driver.makeConnection(Driver.java:452)
        at org.postgresql.Driver.connect(Driver.java:254)
        at
java.sql/java.sql.DriverManager.getConnection(DriverManager.java:677)
        at
java.sql/java.sql.DriverManager.getConnection(DriverManager.java:251)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.connect(AbstractJdbcSeeder.java:265)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.connect(AbstractJdbcSeeder.java:168)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.setupPostgresql(AbstractJdbcSeeder.java:1633)
        at
ch.konnexions.db_seeder.jdbc.postgresql.PostgresqlSeeder.setupDatabase(PostgresqlSeeder.java:125)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.createData(AbstractJdbcSeeder.java:347)
        at
ch.konnexions.db_seeder.DatabaseSeeder.main(DatabaseSeeder.java:194)

Nov. 21, 2020 6:26:36 AM org.postgresql.Driver connect
SEVERE: Connection error:
org.postgresql.util.PSQLException: SCRAM authentication is not supported by
this driver. You need JDK >= 8 and pgjdbc >= 42.2.0 (not ".jre" versions)
        at
org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:625)
        at
org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:205)
        at
org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49)
        at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:195)
        at org.postgresql.Driver.makeConnection(Driver.java:452)
        at org.postgresql.Driver.connect(Driver.java:254)
        at
java.sql/java.sql.DriverManager.getConnection(DriverManager.java:677)
        at
java.sql/java.sql.DriverManager.getConnection(DriverManager.java:251)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.connect(AbstractJdbcSeeder.java:265)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.connect(AbstractJdbcSeeder.java:168)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.setupPostgresql(AbstractJdbcSeeder.java:1633)
        at
ch.konnexions.db_seeder.jdbc.postgresql.PostgresqlSeeder.setupDatabase(PostgresqlSeeder.java:125)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.createData(AbstractJdbcSeeder.java:347)
        at
ch.konnexions.db_seeder.DatabaseSeeder.main(DatabaseSeeder.java:194)

org.postgresql.util.PSQLException: SCRAM authentication is not supported by
this driver. You need JDK >= 8 and pgjdbc >= 42.2.0 (not ".jre" versions)
        at
org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:625)
        at
org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:205)
        at
org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49)
        at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:195)
        at org.postgresql.Driver.makeConnection(Driver.java:452)
        at org.postgresql.Driver.connect(Driver.java:254)
        at
java.sql/java.sql.DriverManager.getConnection(DriverManager.java:677)
        at
java.sql/java.sql.DriverManager.getConnection(DriverManager.java:251)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.connect(AbstractJdbcSeeder.java:265)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.connect(AbstractJdbcSeeder.java:168)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.setupPostgresql(AbstractJdbcSeeder.java:1633)
        at
ch.konnexions.db_seeder.jdbc.postgresql.PostgresqlSeeder.setupDatabase(PostgresqlSeeder.java:125)
        at
ch.konnexions.db_seeder.jdbc.AbstractJdbcSeeder.createData(AbstractJdbcSeeder.java:347)
        at
ch.konnexions.db_seeder.DatabaseSeeder.main(DatabaseSeeder.java:194)
Processing of the script was aborted, error code=1
PS D:\SoftDevelopment\Projects\db_seeder> cmd
Microsoft Windows [Version 10.0.19042.630]
(c) 2020 Microsoft Corporation. All rights reserved.

D:\SoftDevelopment\Projects\db_seeder>java -version
openjdk version "15" 2020-09-15
OpenJDK Runtime Environment (build 15+36-1562)
OpenJDK 64-Bit Server VM (build 15+36-1562, mixed mode, sharing)

D:\SoftDevelopment\Projects\db_seeder>docker ps -a
CONTAINER ID        IMAGE                    COMMAND
CREATED             STATUS                     PORTS
                   NAMES
5b9bfbbcdb40        postgres:13.1-alpine     "docker-entrypoint.s…"   38
minutes ago      Up 38 minutes              0.0.0.0:5432->5432/tcp
                db_seeder_db
426d56c750e8        prestosql/presto:346     "/usr/lib/presto/bin…"   9
hours ago         Exited (255) 2 hours ago   0.0.0.0:8080->8080/tcp
                 db_seeder_presto
3259f5bb6c0e        portainer/portainer-ce   "/portainer"             5
weeks ago         Exited (255) 2 hours ago   0.0.0.0:8000->8000/tcp,
0.0.0.0:9000->9000/tcp   portainer

PG Bug reporting form <noreply@postgresql.org> writes:
> Version 13 was fine, but now with version 13.1 (via Docker image
> postgres:13.1-alpine) and postgresql-42.2.18.jar I get:

> Nov. 21, 2020 6:26:36 AM org.postgresql.core.v3.ConnectionFactoryImpl log
> WARNING: SQLException occurred while connecting to localhost:5432
> org.postgresql.util.PSQLException: SCRAM authentication is not supported by
> this driver. You need JDK >= 8 and pgjdbc >= 42.2.0 (not ".jre" versions)

I doubt this has anything to do with an update to 13.1 per se.
What more likely happened is that you changed your account password
and it's now stored under SCRAM hashing, which your client-side
code is evidently too old to support.  If you don't want to update
your client-side code right now, do "set password_encryption = md5"
and then set the password again.  If you're running as superuser
you can look into pg_authid.rolpassword to verify that the hashed
password starts with "md5" not "SCRAM".

(BTW, md5 is still the default value for password_encryption in v13,
so it seems like you must have overridden that.)

            regards, tom lane

Walter Weinmann <walter.weinmann@gmail.com> writes:
> I use the official PostgreSQL image of DockerHub (docker pull
> postgres:13.1) Is it possible that in 13.1 the default password encryption
> has been changed to scram-sha-256? That would explain my problem, because
> in the image the parameter *password_encryption* in *postgresql.conf* is
> commented out.

Seems unlikely, but the pg_settings row for password_encryption would
tell you more about what the active setting is and where it came from.

            regards, tom lane

    Walter Weinmann wrote:

> I use the official PostgreSQL image of DockerHub (docker pull
> postgres:13.1) Is it possible that in 13.1 the default password encryption
> has been changed to scram-sha-256? That would explain my problem, because
> in the image the parameter *password_encryption* in *postgresql.conf* is
> commented out.

Another possibility is that your deployment process includes a
pg_hba.conf with scram-sha-256 as the auth method.
In that case, if the client cannot do scram-sha-256 it will be rejected,
no matter what is in password_encryption and the format of the
actual password in pg_authid.

See the output of
 select * from pg_hba_file_rules;


Best regards,
--
Daniel Vérité
PostgreSQL-powered mailer: https://www.manitou-mail.org
Twitter: @DanielVerite