Thread: Missing or errooneous pg_hba.conf file
Hello, Running 7.4.2 on Solaris 8 (binaries were built on a different Solaris 8 box). I keep getting the following message when trying to connect to server: FATAL: missing or erroneous pg_hba.conf file HINT: see server log for details. Server log contains message: LOG: invalid entry in pg_hba.conf file at line 60, token "255.255.255.255" The only change I've made was to postgresql.conf to change "tcpip_socket = true". I have not modified pg_hba.conf at all. Line 60 is the default 'host' entry for 127.0.0.1. The token in question is the IP-MASK field. I have found that if I change this value to anything other than "255.255.255.255" (e.g. "255.255.255.254") the message goes away. I get the same message if I add other lines with IP-MASK=255.255.255.255 to the pg_hba.conf file. It just doesn't seem to like '255.255.255.255' for some reason. I get the error using both the 'psql -h ...' command and trying to connect via JDBC. Incidentally, I saw the same problem running in 7.4.1. I ended up just commenting out line 60 to get around it. But now I need IP-MASK=255.255.255.255 so I need to get it resolved. Interestingly the same 7.4.1 binary running on a different machine did not exhibit the problem. Could it be a Solaris patch level thing? thanks in advance, Bill billybobc1210@yahoo.com __________________________________ Do you Yahoo!? SBC Yahoo! - Internet access at a great low price. http://promo.yahoo.com/sbc/
Bill Chandler <billybobc1210@yahoo.com> writes:
> LOG: invalid entry in pg_hba.conf file at line 60,
> token "255.255.255.255"
> I have found that if I change this value to anything
> other than "255.255.255.255" (e.g. "255.255.255.254")
> the message goes away.
Bizarre. AFAICS this must indicate that getaddrinfo() is rejecting the
value, which perhaps could happen if some bit of it were miscoded to
use "-1" as a failure code.
> Interestingly the same 7.4.1 binary running on a different machine did
> not exhibit the problem. Could it be a Solaris patch level thing?
Seems likely. Can you update and see if that fixes it?
regards, tom lane
After takin a swig o' Arrakan spice grog, tgl@sss.pgh.pa.us (Tom Lane) belched out: > Bill Chandler <billybobc1210@yahoo.com> writes: >> LOG: invalid entry in pg_hba.conf file at line 60, >> token "255.255.255.255" > >> I have found that if I change this value to anything >> other than "255.255.255.255" (e.g. "255.255.255.254") >> the message goes away. > > Bizarre. AFAICS this must indicate that getaddrinfo() is rejecting the > value, which perhaps could happen if some bit of it were miscoded to > use "-1" as a failure code. > >> Interestingly the same 7.4.1 binary running on a different machine did >> not exhibit the problem. Could it be a Solaris patch level thing? > > Seems likely. Can you update and see if that fixes it? Hmm... I think I have seen the same thing. It went away when I substituted in some "grouped" entries, applying policies to subnets rather than to individual hosts. That happened to be a more appropriate model to use, as it cuts WAY down on the need for pg_hba.conf entries, and on the need to modify configuration in the future. (We used to have, on test boxes, named IP addresses for people that now get their IPs assigned by DHCP... Without subnet definitions, that's a nightmare!) We've got a box getting patched Saturday; I'll watch for that... -- "cbbrowne","@","ntlug.org" http://www3.sympatico.ca/cbbrowne/ Do Roman paramedics refer to IV's as "4's"?
Christopher Browne <cbbrowne@acm.org> writes:
> After takin a swig o' Arrakan spice grog, tgl@sss.pgh.pa.us (Tom Lane) belched out:
>> Bill Chandler <billybobc1210@yahoo.com> writes:
>>> Interestingly the same 7.4.1 binary running on a different machine did
>>> not exhibit the problem. Could it be a Solaris patch level thing?
>>
>> Seems likely. Can you update and see if that fixes it?
> Hmm... I think I have seen the same thing.
Interesting. I forgot to mention that a likely workaround (in 7.4.*
anyway) is to use CIDR-style specification of host+mask: "127.0.0.1/32"
instead of "127.0.0.1 255.255.255.255". That would avoid calling
getaddrinfo for the troublesome value. But it would be nice to verify
whether this is a Solaris bug or our own fault.
regards, tom lane
I am in the process of having the Solaris 8 machine upgrading w/ latest patches. I will let you know if it fixes the problem. Thanks. Bill --- Tom Lane <tgl@sss.pgh.pa.us> wrote: > Bill Chandler <billybobc1210@yahoo.com> writes: > > LOG: invalid entry in pg_hba.conf file at line 60, > > token "255.255.255.255" > > > I have found that if I change this value to > anything > > other than "255.255.255.255" (e.g. > "255.255.255.254") > > the message goes away. > > Bizarre. AFAICS this must indicate that > getaddrinfo() is rejecting the > value, which perhaps could happen if some bit of it > were miscoded to > use "-1" as a failure code. > > > Interestingly the same 7.4.1 binary running on a > different machine did > > not exhibit the problem. Could it be a Solaris > patch level thing? > > Seems likely. Can you update and see if that fixes > it? > > regards, tom lane > > ---------------------------(end of > broadcast)--------------------------- > TIP 8: explain analyze is your friend __________________________________ Do you Yahoo!? Yahoo! Domains � Claim yours for only $14.70/year http://smallbusiness.promotions.yahoo.com/offer
Hi all, I had my Solaris 8 machine upgraded with latest patches. No change. Still does not like 255.255.255.255. Using the alternate format of IP-address/32 does fix the problem, though so glad to have a workaround. Still it would be nice to know why this happens on some systems and not on others. Does anybody know of any system config parameters that would affect this? Enironment variables? Config files in /etc? Very strange. Thanks, Bill --- Bill Chandler <billybobc1210@yahoo.com> wrote: > I am in the process of having the Solaris 8 machine > upgrading w/ latest patches. I will let you know > if it fixes the problem. > > Thanks. > > Bill > > --- Tom Lane <tgl@sss.pgh.pa.us> wrote: > > Bill Chandler <billybobc1210@yahoo.com> writes: > > > LOG: invalid entry in pg_hba.conf file at line > 60, > > > token "255.255.255.255" > > > > > I have found that if I change this value to > > anything > > > other than "255.255.255.255" (e.g. > > "255.255.255.254") > > > the message goes away. > > > > Bizarre. AFAICS this must indicate that > > getaddrinfo() is rejecting the > > value, which perhaps could happen if some bit of > it > > were miscoded to > > use "-1" as a failure code. > > > > > Interestingly the same 7.4.1 binary running on a > > different machine did > > > not exhibit the problem. Could it be a Solaris > > patch level thing? > > > > Seems likely. Can you update and see if that > fixes > > it? > > > > regards, tom lane > > > > ---------------------------(end of > > broadcast)--------------------------- > > TIP 8: explain analyze is your friend > > > > > > __________________________________ > Do you Yahoo!? > Yahoo! Domains � Claim yours for only $14.70/year > http://smallbusiness.promotions.yahoo.com/offer > > ---------------------------(end of > broadcast)--------------------------- > TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org __________________________________ Do you Yahoo!? Yahoo! Domains � Claim yours for only $14.70/year http://smallbusiness.promotions.yahoo.com/offer