[Spacewalk-list] Package Search Failing, Ident Authentication Failed

Mon Apr 2 18:37:46 UTC 2012

Changing the auth method in pg_hba.conf to md5 and then restarting postgres
worked.  Thank you very much!  

From: spacewalk-list-bounces at redhat.com
[mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Paul Robert Marino
Sent: Thursday, March 29, 2012 5:45 PM
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] Package Search Failing, Ident Authentication
Failed

You shouldn't be using ident auth in postgresql.
Instead you should be using md5 auth. Or simmilar mechanisim.
Ident auth is really only avalible because it makes the initial
configuration easier, and some times its used for scripts so they don't need
to contain passwords, however that's a bad security practice.
If it worked before and stopped working now it probably because it can't do
remote ident verification which is handeled by xinetd.
To really fix the problem you need to edit the
/var/lib/pgsql/data/gp_hba.conf file and change the auth mechanisim to md5.
Not if both are configured postgresql will honor the first entry from the
top that matches the user and database.

On Mar 28, 2012 11:54 AM, "Glennie, Jonathan - 0443 - MITLL"
<jrglenni at ll.mit.edu> wrote:

Hello-

On spacewalk 1.6, running a package search in the GUI displays a red banner
that reads "Could not execute query package_name".
/var/log/rhn/search/rhn_search_daemon.log shows the following:

INFO   | jvm 1    | 2012/03/28 11:25:41 | 2012-03-28 11:25:41,792 [Thread-8]
ERROR com.redhat.satellite.search.rpc.handlers.IndexHandler - Caught
exception: 

INFO   | jvm 1    | 2012/03/28 11:25:41 | org.postgresql.util.PSQLException:
FATAL: Ident authentication failed for user "spaceuser"

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFact
oryImpl.java:291)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFa
ctoryImpl.java:108)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:
66)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.jdbc2.AbstractJdbc2Connection.<init>(AbstractJdbc2Connection.
java:125)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.jdbc3.AbstractJdbc3Connection.<init>(AbstractJdbc3Connection.
java:30)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.jdbc3g.AbstractJdbc3gConnection.<init>(AbstractJdbc3gConnecti
on.java:22)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.jdbc3g.Jdbc3gConnection.<init>(Jdbc3gConnection.java:24)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.Driver.makeConnection(Driver.java:393)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
org.postgresql.Driver.connect(Driver.java:267)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
java.sql.DriverManager.getConnection(DriverManager.java:620)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
java.sql.DriverManager.getConnection(DriverManager.java:200)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.ibatis.common.jdbc.SimpleDataSource.popConnection(SimpleDataSource.java:
580)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.ibatis.common.jdbc.SimpleDataSource.getConnection(SimpleDataSource.java:
222)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.ibatis.sqlmap.engine.transaction.jdbc.JdbcTransaction.init(JdbcTransacti
on.java:48)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.ibatis.sqlmap.engine.transaction.jdbc.JdbcTransaction.getConnection(Jdbc
Transaction.java:89)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.ibatis.sqlmap.engine.mapping.statement.GeneralStatement.executeQueryForL
ist(GeneralStatement.java:123)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.ibatis.sqlmap.engine.impl.SqlMapExecutorDelegate.queryForList(SqlMapExec
utorDelegate.java:615)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.ibatis.sqlmap.engine.impl.SqlMapExecutorDelegate.queryForList(SqlMapExec
utorDelegate.java:589)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.ibatis.sqlmap.engine.impl.SqlMapSessionImpl.queryForList(SqlMapSessionIm
pl.java:118)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.redhat.satellite.search.db.Query.loadList(Query.java:66)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.redhat.satellite.search.rpc.handlers.IndexHandler.screenHits(IndexHandle
r.java:203)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.redhat.satellite.search.rpc.handlers.IndexHandler.search(IndexHandler.ja
va:150)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.redhat.satellite.search.rpc.handlers.IndexHandler.search(IndexHandler.ja
va:101)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57
)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:43)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
java.lang.reflect.Method.invoke(Method.java:616)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
redstone.xmlrpc.handlers.ReflectiveInvocationHandler.execute(ReflectiveInvoc
ationHandler.java:217)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
redstone.xmlrpc.handlers.ReflectiveInvocationHandler.invoke(ReflectiveInvoca
tionHandler.java:133)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
redstone.xmlrpc.XmlRpcDispatcher.dispatch(XmlRpcDispatcher.java:123)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
redstone.xmlrpc.XmlRpcServer.execute(XmlRpcServer.java:83)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
com.redhat.satellite.search.rpc.XmlRpcInvoker.handle(XmlRpcInvoker.java:73)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
simple.http.Dispatcher.run(Dispatcher.java:83)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
simple.util.process.Daemon.execute(Daemon.java:121)

INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
simple.util.process.Daemon.run(Daemon.java:106)

INFO   | jvm 1    | 2012/03/28 11:25:41 | Mar 28, 2012 11:25:41 AM
redstone.xmlrpc.XmlRpcDispatcher writeError

INFO   | jvm 1    | 2012/03/28 11:25:41 | WARNING:
redstone.xmlrpc.XmlRpcFault: FATAL: Ident authentication failed for user
"spaceuser"

Is there a config file that I can check to see what credentials it is using?
The account and password that is using has been the same since day 1
although we re-ran the setup to use the FQDN of the server instead of the
CN, not sure if that would have any impact on this or not.  

-Jon

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20120402/a4dbedf0/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5410 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20120402/a4dbedf0/attachment.bin>