Thread: streaming replication authentication

streaming replication authentication

From

Zachary Hanson-Hart

Date:

22 February 2019, 19:46:27

Hi pgsql-general,

I know that the requirement for replication is that a user be allowed to connect to the "replication" database. My question is how to configure the streaming replication client to use a particular authentication method. I haven't been able to find examples of streaming replication using any authentication other than trust or md5.

Specifically, I'm interested in using kerberos (via gssapi) with a keytab. I'm able to authenticate from the command line with gss after doing kinit, but that's not practical for replication. Can gss authentication be used in replication?

FWIW, I'm using RedHat 7's version of Postgresql 9.2.

Thanks for any hints or advice,

Zach

Re: streaming replication authentication

From

Stephen Frost

Date:

23 February 2019, 02:09:53

Greetings,

* Zachary Hanson-Hart (zachhh@temple.edu) wrote:
>    I know that the requirement for replication is that a user be allowed to
> connect to the "replication" database.  My question is how to configure the
> streaming replication client to use a particular authentication method.  I
> haven't been able to find examples of streaming replication using any
> authentication other than trust or md5.
>
> Specifically, I'm interested in using kerberos (via gssapi) with a keytab.
> I'm able to authenticate from the command line with gss after doing kinit,
> but that's not practical for replication.  Can gss authentication be used
> in replication?

Yes, GSS auth can be used in replication.  Why do you think it's not
practical...?

> FWIW, I'm using RedHat 7's version of Postgresql 9.2.

PG 9.2 is no longer supported by this community, I strongly encourage
you to upgrade to a supported version.

Thanks!

Stephen

Attachment

signature.asc