Re: BUG #6353: If there is invalid line in pg_hba.conf, DB start fails without any nofice and no logs in pgstartup.

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: erkan(at)eurotel(dot)com(dot)tr
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #6353: If there is invalid line in pg_hba.conf, DB start fails without any nofice and no logs in pgstartup.
Date: 2011-12-22 17:26:40
Message-ID: 16435.1324574800@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

erkan(at)eurotel(dot)com(dot)tr writes:
> If I add this line to pg_hba.conf, it causes a silent startup failure:
> local all backup 127.0.0.1/32 trust
> There is a linux user backup on this system. After adding this line and
> issue "pg_ctl reload" it signals server successfully, no errors. But if I
> stop db server, I can not start db anymore. Strangely no log exists in
> pgstartup.log.

Well, that line is obviously incorrect, because a "local" line doesn't
need an IP address. For me, the postmaster gives very clear warnings
about this, either in the pg_ctl reload case:

LOG: received SIGHUP, reloading configuration files
LOG: invalid authentication method "127.0.0.1/32"
CONTEXT: line 95 of configuration file "/var/lib/pgsql/data/pg_hba.conf"
WARNING: pg_hba.conf not reloaded

or in the fresh-start case:

LOG: invalid authentication method "127.0.0.1/32"
CONTEXT: line 95 of configuration file "/var/lib/pgsql/data/pg_hba.conf"
FATAL: could not load pg_hba.conf

Your problem apparently is that the log messages are either not coming
out at all, or you're looking in the wrong place for them. You have not
said anything about your logging configuration so it's hard to give
concrete advice, but in the default configuration set up by Red Hat's
packages I'd expect those messages to appear in the current log file
underneath /var/lib/pgsql/data/pg_log/. It's also conceivable that the
messages aren't getting out at all because of a permissions-type problem
--- I remember some very old versions of selinux policy would sometimes
block postgres log messages, for example. If you've got selinux enabled
it'd be worth checking for avc messages in the kernel logs.

regards, tom lane

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message stuartb81 2011-12-23 10:28:52 Re: libber library not found on RC1
Previous Message Euler Taveira de Oliveira 2011-12-22 17:22:46 Re: BUG #6353: If there is invalid line in pg_hba.conf, DB start fails without any nofice and no logs in pgstartup.