From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 29057 invoked by alias); 2 Oct 2003 20:28:42 -0000 Mailing-List: contact rhdb-help@sources.redhat.com; run by ezmlm Precedence: bulk List-Subscribe: List-Post: List-Help: , Sender: rhdb-owner@sources.redhat.com Received: (qmail 29050 invoked from network); 2 Oct 2003 20:28:38 -0000 Received: from unknown (HELO yonge.cs.toronto.edu) (128.100.1.8) by sources.redhat.com with SMTP; 2 Oct 2003 20:28:38 -0000 Received: from jane.cs.toronto.edu ([128.100.5.248]) by yonge.cs.toronto.edu with SMTP id <200211-26963>; Thu, 2 Oct 2003 16:28:38 -0400 Received: from qew.cs.toronto.edu by jane.cs.toronto.edu id <453223-28745>; Thu, 2 Oct 2003 16:28:35 -0400 Date: Thu, 02 Oct 2003 20:28:00 -0000 From: Wei Tjioe X-X-Sender: wtjioe@qew.cs To: Fernando Nasser cc: rhdb@sources.redhat.com Subject: Re: problem with Configuring a Connection to a Database using Visual Explain In-Reply-To: <3F7C859C.4060604@redhat.com> Message-ID: References: <3F7C859C.4060604@redhat.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-SW-Source: 2003-q4/txt/msg00002.txt.bz2 Thanks. I will try SSL. tcpip_socket was "true" in my postgresql.conf Also, I noticed this morning that PostgreSQL Access was able to connect successfully using md5 in pg_hba.conf (while Visual Explain triggered an SQLException). Wei On Thu, 2 Oct 2003, Fernando Nasser wrote: > Wei, > > The client side (in this case JDBC) is not aware of how the server stores it's > passwords. They are sent clear text with either 'password' or 'md5' -- they are > stored encrypted in the server. If you need more security and don't want clear > text passwords on the network make the connection using SSL. The JDBC driver > supports SSL connection for some time now. > > W.r.t. your connection problem, the message may be misleading. The reason that > cause the password authentication to fail may have been a communication problem. > Check if you have the line: > > tcpip_socket = true > > in your postgresql.conf file (in the PGDATA directory). > > Java (and JDBC) cannot connect using Unix sockets, so you must be accepting > TCP/IP connections. > > Regards, > Fernando > > > Wei Tjioe wrote:> Another observation with Visual Explain is on how it treats > PASSWORD > > authentication. > > > > For example: in pg_hba.conf > > > > local all md5 > > host all 127.0.0.1 255.255.255.255 md5 > > > > This causes Visual Explain to refuse connection based on Password > > (although connection request through psql, both local and -h, succeeded). > > > > Test 1: Driver > > PASSED > > > > Test 2: Connection > > FAILED > > Unable to connect to database. > > Reason: Something ....Please report this exception: Exception: > > java.sql.SQLException: FATAL 1: > > Password authentication failed for use "me" > > > > > > When authentication is switched to clear text: > > > > local all md5 > > host all 127.0.0.1 255.255.255.255 password > > > > [root@darwin data]# pg_ctl reload > > postmaster successfully signaled > > ... > > > > Visual Explain connects to database successfully. > > > > Testing Database Connection: testdb > > Test1: Driver > > PASSED > > > > Test2: Connection > > PASSED > > > > > > If there's a safer alternative, please post. > > > > > > Wei > > > > > > > > -- > Fernando Nasser > Red Hat - Toronto E-Mail: fnasser@redhat.com > 2323 Yonge Street, Suite #300 > Toronto, Ontario M4P 2C9 > >