[Spacewalk-list] Package Search Failing, Ident Authentication Failed

Paul Robert Marino prmarino1 at gmail.com
Mon Apr 2 21:33:41 UTC 2012


Glad I could help
On Apr 2, 2012 2:44 PM, "Glennie, Jonathan - 0443 - MITLL" <
jrglenni at ll.mit.edu> wrote:

> Changing the auth method in pg_hba.conf to md5 and then restarting
> postgres worked.  Thank you very much!  ****
>
> ** **
>
> *From:* spacewalk-list-bounces at redhat.com [mailto:
> spacewalk-list-bounces at redhat.com] *On Behalf Of *Paul Robert Marino
> *Sent:* Thursday, March 29, 2012 5:45 PM
> *To:* spacewalk-list at redhat.com
> *Subject:* Re: [Spacewalk-list] Package Search Failing, Ident
> Authentication Failed****
>
> ** **
>
> You shouldn't be using ident auth in postgresql.
> Instead you should be using md5 auth. Or simmilar mechanisim.
> Ident auth is really only avalible because it makes the initial
> configuration easier, and some times its used for scripts so they don't
> need to contain passwords, however that's a bad security practice.
> If it worked before and stopped working now it probably because it can't
> do remote ident verification which is handeled by xinetd.
> To really fix the problem you need to edit the
> /var/lib/pgsql/data/gp_hba.conf file and change the auth mechanisim to md5.
> Not if both are configured postgresql will honor the first entry from the
> top that matches the user and database.****
>
> On Mar 28, 2012 11:54 AM, "Glennie, Jonathan - 0443 - MITLL" <
> jrglenni at ll.mit.edu> wrote:****
>
> Hello-****
>
>  ****
>
> On spacewalk 1.6, running a package search in the GUI displays a red
> banner that reads “Could not execute query *package_name*”.
> /var/log/rhn/search/rhn_search_daemon.log shows the following:****
>
>  ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 | 2012-03-28 11:25:41,792
> [Thread-8] ERROR com.redhat.satellite.search.rpc.handlers.IndexHandler -
> Caught exception: ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |
> org.postgresql.util.PSQLException: FATAL: Ident authentication failed for
> user "spaceuser"****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:291)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:108)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:66)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.jdbc2.AbstractJdbc2Connection.<init>(AbstractJdbc2Connection.java:125)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.jdbc3.AbstractJdbc3Connection.<init>(AbstractJdbc3Connection.java:30)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.jdbc3g.AbstractJdbc3gConnection.<init>(AbstractJdbc3gConnection.java:22)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.jdbc3g.Jdbc3gConnection.<init>(Jdbc3gConnection.java:24)***
> *
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.Driver.makeConnection(Driver.java:393)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> org.postgresql.Driver.connect(Driver.java:267)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> java.sql.DriverManager.getConnection(DriverManager.java:620)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> java.sql.DriverManager.getConnection(DriverManager.java:200)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.ibatis.common.jdbc.SimpleDataSource.popConnection(SimpleDataSource.java:580)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.ibatis.common.jdbc.SimpleDataSource.getConnection(SimpleDataSource.java:222)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.ibatis.sqlmap.engine.transaction.jdbc.JdbcTransaction.init(JdbcTransaction.java:48)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.ibatis.sqlmap.engine.transaction.jdbc.JdbcTransaction.getConnection(JdbcTransaction.java:89)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.ibatis.sqlmap.engine.mapping.statement.GeneralStatement.executeQueryForList(GeneralStatement.java:123)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.ibatis.sqlmap.engine.impl.SqlMapExecutorDelegate.queryForList(SqlMapExecutorDelegate.java:615)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.ibatis.sqlmap.engine.impl.SqlMapExecutorDelegate.queryForList(SqlMapExecutorDelegate.java:589)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.ibatis.sqlmap.engine.impl.SqlMapSessionImpl.queryForList(SqlMapSessionImpl.java:118)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.redhat.satellite.search.db.Query.loadList(Query.java:66)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.redhat.satellite.search.rpc.handlers.IndexHandler.screenHits(IndexHandler.java:203)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.redhat.satellite.search.rpc.handlers.IndexHandler.search(IndexHandler.java:150)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.redhat.satellite.search.rpc.handlers.IndexHandler.search(IndexHandler.java:101)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> java.lang.reflect.Method.invoke(Method.java:616)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> redstone.xmlrpc.handlers.ReflectiveInvocationHandler.execute(ReflectiveInvocationHandler.java:217)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> redstone.xmlrpc.handlers.ReflectiveInvocationHandler.invoke(ReflectiveInvocationHandler.java:133)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> redstone.xmlrpc.XmlRpcDispatcher.dispatch(XmlRpcDispatcher.java:123)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> redstone.xmlrpc.XmlRpcServer.execute(XmlRpcServer.java:83)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> com.redhat.satellite.search.rpc.XmlRpcInvoker.handle(XmlRpcInvoker.java:73)
> ****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> simple.http.Dispatcher.run(Dispatcher.java:83)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> simple.util.process.Daemon.execute(Daemon.java:121)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 |       at
> simple.util.process.Daemon.run(Daemon.java:106)****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 | Mar 28, 2012 11:25:41 AM
> redstone.xmlrpc.XmlRpcDispatcher writeError****
>
> INFO   | jvm 1    | 2012/03/28 11:25:41 | WARNING:
> redstone.xmlrpc.XmlRpcFault: FATAL: Ident authentication failed for user
> "spaceuser"****
>
>  ****
>
>  ****
>
> Is there a config file that I can check to see what credentials it is
> using?  The account and password that is using has been the same since day
> 1 although we re-ran the setup to use the FQDN of the server instead of the
> CN, not sure if that would have any impact on this or not.  ****
>
>  ****
>
>  ****
>
>  ****
>
> -Jon****
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list****
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20120402/b9583123/attachment.htm>


More information about the Spacewalk-list mailing list