Add the following line and try restarting it: host all all 127.0.0.1/32 trust
On Wed, Dec 18, 2019 at 12:45 AM Reed Villanueva <rvillanu...@ucera.org> wrote: > One odd thing I notice is that the pg_hba.conf line has: > > # IPv4 local connections:#host all all > 127.0.0.1/32 ident > host all all 0.0.0.0/0 trust > > yet it appears that postgres still trying to use ident authentication > (despite my having service postgresql restart multiple times at this > point). > > On Tue, Dec 17, 2019 at 12:28 PM Reed Villanueva <rvillanu...@ucera.org> > wrote: > >> Trying to use postgresql as backend for airflow (v1.10.5) on centos7 >> machine (following this article: >> https://www.ryanmerlin.com/2019/07/apache-airflow-installation-on-ubuntu-18-04-18-10/) >> and seeing error >> >> sqlalchemy.exc.OperationalError: (psycopg2.OperationalError) FATAL: >> Ident authentication failed for user "airflow" >> >> My settings on the machine are... >> >> [airflow@airflowetl airflow]$ psql airflow >> psql (9.2.24) >> Type "help" for help. >> >> airflow=> \du >> List of roles >> Role name | Attributes | Member of >> -----------+------------------------------------------------+----------- >> airflow | | {} >> postgres | Superuser, Create role, Create DB, Replication | {} >> >> airflow-> \l >> List of databases >> Name | Owner | Encoding | Collate | Ctype | Access >> privileges >> -----------+----------+----------+-------------+-------------+----------------------- >> airflow | postgres | UTF8 | en_US.UTF-8 | en_US.UTF-8 | =Tc/postgres >> + >> | | | | | >> postgres=CTc/postgres+ >> | | | | | >> airflow=CTc/postgres >> postgres | postgres | UTF8 | en_US.UTF-8 | en_US.UTF-8 | >> template0 | postgres | UTF8 | en_US.UTF-8 | en_US.UTF-8 | =c/postgres >> + >> | | | | | >> postgres=CTc/postgres >> template1 | postgres | UTF8 | en_US.UTF-8 | en_US.UTF-8 | =c/postgres >> + >> | | | | | >> postgres=CTc/postgres >> >> airflow=> \c airflow >> You are now connected to database "airflow" as user "airflow". >> >> airflow=> \dt >> No relations found. >> >> >> >> [root@airflowetl airflow]# cat /var/lib/pgsql/data/pg_hba.conf >> ....# TYPE DATABASE USER ADDRESS METHOD >> # "local" is for Unix domain socket connections onlylocal all >> all peer# IPv4 local connections:#host >> all all 127.0.0.1/32 ident >> host all all 0.0.0.0/0 trust# IPv6 >> local connections: >> host all all ::1/128 ident# Allow >> replication connections from localhost, by a user with the# replication >> privilege.#local replication postgres >> peer#host replication postgres 127.0.0.1/32 >> ident#host replication postgres ::1/128 ident >> >> >> >> [root@airflowetl airflow]# cat /var/lib/pgsql/data/postgresql.conf >> ....# — — — — — — — — — — — — — — — — — — — — — — — — — — — — — # >> CONNECTIONS AND AUTHENTICATION# — — — — — — — — — — — — — — — — — — — — — — >> — — — — — — — # — Connection Settings -#listen_addresses = ‘localhost’ # >> what IP address(es) to listen on; >> listen_addresses = ‘*’ # for Airflow connection >> >> >> >> [airflow@airflowetl airflow]$ cat airflow.cfg >> .... >> [core] >> ....# The executor class that airflow should use. Choices include# >> SequentialExecutor, LocalExecutor, CeleryExecutor, DaskExecutor, >> KubernetesExecutor#executor = SequentialExecutor >> executor = LocalExecutor >> # The SqlAlchemy connection string to the metadata database.# SqlAlchemy >> supports many different database engine, more information# their >> website#sql_alchemy_conn = sqlite:////home/airflow/airflow/airflow.db >> sql_alchemy_conn = >> postgresql+psycopg2://airflow:mypassword@localhost:5432/airflow >> >> >> and not quite sure what could be going wrong here. Using the password >> from the sql_alchemy_conn string, I am able to do "psql -U airflow >> --password" and login successfully, so not sure what the auth faiure is for. >> >> Anyone have any further debugging suggestions or can see the error here? >> > > This electronic message is intended only for the named > recipient, and may contain information that is confidential or > privileged. If you are not the intended recipient, you are > hereby notified that any disclosure, copying, distribution or > use of the contents of this message is strictly prohibited. If > you have received this message in error or are not the named > recipient, please notify us immediately by contacting the > sender at the electronic mail address noted above, and delete > and destroy all copies of this message. Thank you. >
