Re: problem with Configuring a Connection to a Database using Visual Explain

[Fernando Nasser <fnasser@redhat.com>]

Wei,

The client side (in this case JDBC) is not aware of how the server stores it's 
passwords.  They are sent clear text with either 'password' or 'md5' -- they are 
stored encrypted in the server.  If you need more security and don't want clear 
text passwords on the network make the connection using SSL.  The JDBC driver 
supports SSL connection for some time now.

W.r.t. your connection problem, the message may be misleading.  The reason that 
cause the password authentication to fail may have been a communication problem.
Check if you have the line:

tcpip_socket = true

in your postgresql.conf file (in the PGDATA directory).

Java (and JDBC) cannot connect using Unix sockets, so you must be accepting 
TCP/IP connections.

Regards,
Fernando


Wei Tjioe wrote:> Another observation with Visual Explain is on how it treats 
PASSWORD
> authentication.
> 
> For example: in pg_hba.conf
> 
> local   all                                     md5
> host    all     127.0.0.1     255.255.255.255   md5
> 
> This causes Visual Explain to refuse connection based on Password
> (although connection request through psql, both local and -h, succeeded).
> 
> Test 1: Driver
> PASSED
> 
> Test 2: Connection
> FAILED
> Unable to connect to database.
> Reason: Something ....Please report this exception: Exception:
> java.sql.SQLException: FATAL 1:
> Password authentication failed for use "me"
> 
> 
> When authentication is switched to clear text:
> 
> local   all                                     md5
> host    all     127.0.0.1     255.255.255.255   password
> 
> [root@darwin data]# pg_ctl reload
> postmaster successfully signaled
> ...
> 
> Visual Explain connects to database successfully.
> 
> Testing Database Connection: testdb
> Test1: Driver
> PASSED
> 
> Test2: Connection
> PASSED
> 
> 
> If there's a safer alternative, please post.
> 
> 
> Wei
> 
> 



-- 
Fernando Nasser
Red Hat - Toronto                       E-Mail:  fnasser@redhat.com
2323 Yonge Street, Suite #300
Toronto, Ontario   M4P 2C9