Thread: issue with remote backup

Atul Kumar <akumar14871@gmail.com> writes:
> In pg_hba.conf file I have an entry like below:

> host    all             all             <remote server ip>/32            md5

That is an entry governing ordinary session connections ...

> Error that I got:
> pg_basebackup: error: FATAL:  no pg_hba.conf entry for replication
> connection from host "remote_ip", user "postgres", SSL off

... and that is complaining about the lack of an entry for
replication connections.  They are handled by different pg_hba.conf
entries.

            regards, tom lane

On 10/26/23 09:51, Atul Kumar wrote:
> Hi,
> 
> I have the postgres12 version running on centos7.
> 
> In pg_hba.conf file I have an entry like below:
> 
> host    all             all             <remote server ip>/32            md5
> 
> So from the above entry, I understand that all users can connect to all 
> databases from the remote ip.
> 
> 
> But when I use pg_basebackup from remote server using below command I 
> get the below error:
> 
> pg_basebackup -h DB_server_hostname -p 5444 -U postgres -D 
> /var/lib/edb/backups/10262023_1 -Fp -Xs -c fast -P
> 
> Error that I got:
> 
> pg_basebackup: error: FATAL:  no pg_hba.conf entry for replication 
> connection from host "remote_ip", user "postgres", SSL off
> 
> So please help me understand why I am getting this error even after 
> having a related entry in the pg_hba.conf file.


https://www.postgresql.org/docs/current/auth-pg-hba-conf.html

"
database

     Specifies which database name(s) this record matches. The value all 
specifies that it matches all databases. The value sameuser specifies 
that the record matches if the requested database has the same name as 
the requested user. The value samerole specifies that the requested user 
must be a member of the role with the same name as the requested 
database. (samegroup is an obsolete but still accepted spelling of 
samerole.) Superusers are not considered to be members of a role for the 
purposes of samerole unless they are explicitly members of the role, 
directly or indirectly, and not just by virtue of being a superuser. The 
value replication specifies that the record matches if a physical 
replication connection is requested, however, it doesn't match with 
logical replication connections. Note that physical replication 
connections do not specify any particular database whereas logical 
replication connections do specify it. Otherwise, this is the name of a 
specific PostgreSQL database or a regular expression. Multiple database 
names and/or regular expressions can be supplied by separating them with 
commas.

     If the database name starts with a slash (/), the remainder of the 
name is treated as a regular expression. (See Section 9.7.3.1 for 
details of PostgreSQL's regular expression syntax.)

     A separate file containing database names and/or regular 
expressions can be specified by preceding the file name with @.

"

> 
> 
> 
> 
>   Regards.

-- 
Adrian Klaver
adrian.klaver@aklaver.com