Did you correctly upgrade your whole environment to scram-sha-256?

<quote>
To upgrade an existing installation from md5 to scram-sha-256, after having 
ensured that all client libraries in use are new enough to support SCRAM, set 
password_encryption = 'scram-sha-256' in postgresql.conf, make all users set 
new passwords, and change the authentication method specifications in 
pg_hba.conf to scram-sha-256.
</quote>


-Markus



Von: Hemil Ruparel <hemilruparel2...@gmail.com>
Gesendet: Freitag, 27. November 2020 09:38
An: Laurenz Albe <laurenz.a...@cybertec.at>
Cc: pgsql-generallists.postgresql.org <pgsql-general@lists.postgresql.org>
Betreff: Re: How to debug authentication issues in Postgres

The log says:
> FATAL:  password authentication failed for user "centos"
> DETAIL:  Connection matched pg_hba.conf line 88: "host    user       password 
>          0.0.0.0/0<http://0.0.0.0/0>               scram-sha-256"

I can't understand where is the problem as both psql and pgadmin connect 
without problems using the same password

On Fri, Nov 27, 2020 at 1:46 PM Hemil Ruparel 
<hemilruparel2...@gmail.com<mailto:hemilruparel2...@gmail.com>> wrote:
Sorry. This was the replication section:
local   replication     all                                     peer
host    replication     all             127.0.0.1/32<http://127.0.0.1/32>       
     scram-sha-256
host    replication     all             ::1/128                 scram-sha-256

On Fri, Nov 27, 2020 at 1:41 PM Laurenz Albe 
<laurenz.a...@cybertec.at<mailto:laurenz.a...@cybertec.at>> wrote:
On Fri, 2020-11-27 at 13:34 +0530, Hemil Ruparel wrote:
> I have restarted postgres quite a few times to try making configuration 
> changes and it
>  is always back up. I don't know how. Feels weird to me. I didn't add the line
>  "local replication all". It was there by default

I don't believe that.

This is how it looks by default:

# Allow replication connections from localhost, by a user with the
# replication privilege.
local   replication     all                                     trust
host    replication     all             127.0.0.1/32<http://127.0.0.1/32>       
     trust
host    replication     all             ::1/128                 trust

Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com

Reply via email to