[Pkg-nagios-devel] Bug#659833: icinga-idoutils: automatic db configuration tries to access DB via TCP/IP for no reason

Alexander Wirt formorer at debian.org
Fri Oct 19 13:27:04 UTC 2012


tag  659833 moreinfo
thanks

Christoph Anton Mitterer schrieb am Tuesday, den 14. February 2012:

> Package: icinga-idoutils
> Version: 1.6.1-2
> Severity: important
> 
> 
> Hi.
> 
> This may likely be an issue in dbconfig-common, but I have not much clue about it
> so I report it first here.
> Please redirect if I'm right.
> 
> All this is with PostgreSQL.
> 
> 
> When configuring the DB automatically, it offers to do this via unix socets and
> even suggests this as default.
> 
> However, at some stage it still tries to access it via TCP/IP and fails miserably
> if TCP/IP is not enabled at all in PostgreSQL, or if there is just not access
> allowed on it (no "trust" methond or nur running local identd).
> 
> 
> Marking this as major, as it seems to make the normal default (unix socket only)
> impossible and basically forces one to enable rather insecure auth methods
> (trust or weak password based) or installing a local identd for no reason.
> 
> 
> The PostgreSQL log shows this:
> 2012-02-14 02:10:30 CET LOG:  connection received: host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection authorized: user=postgres database=template1
> 2012-02-14 02:10:30 CET LOG:  disconnection: session time: 0:00:00.002 user=postgres database=template1 host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection received: host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection authorized: user=postgres database=template1
> 2012-02-14 02:10:30 CET ERROR:  role "icingaidoutils" does not exist
> 2012-02-14 02:10:30 CET STATEMENT:  ALTER USER "icingaidoutils"
> 2012-02-14 02:10:30 CET LOG:  disconnection: session time: 0:00:00.002 user=postgres database=template1 host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection received: host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection authorized: user=postgres database=template1
> 2012-02-14 02:10:30 CET LOG:  disconnection: session time: 0:00:00.033 user=postgres database=template1 host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection received: host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection authorized: user=postgres database=template1
> 2012-02-14 02:10:30 CET LOG:  disconnection: session time: 0:00:00.021 user=postgres database=template1 host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection received: host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection authorized: user=postgres database=template1
> 2012-02-14 02:10:30 CET LOG:  disconnection: session time: 0:00:00.002 user=postgres database=template1 host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection received: host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection authorized: user=postgres database=icinga
> 2012-02-14 02:10:30 CET FATAL:  database "icinga" does not exist
> 2012-02-14 02:10:30 CET LOG:  connection received: host=[local]
> 2012-02-14 02:10:30 CET LOG:  connection authorized: user=postgres database=postgres
> 2012-02-14 02:10:31 CET LOG:  disconnection: session time: 0:00:00.967 user=postgres database=postgres host=[local]
> 2012-02-14 02:10:31 CET LOG:  connection received: host=[local]
> 2012-02-14 02:10:31 CET LOG:  connection authorized: user=postgres database=icinga
> 2012-02-14 02:10:31 CET LOG:  disconnection: session time: 0:00:00.002 user=postgres database=icinga host=[local]
> 2012-02-14 02:10:31 CET LOG:  connection received: host=::1 port=45713
> 2012-02-14 02:10:31 CET FATAL:  no pg_hba.conf entry for host "::1", user "icingaidoutils", database "icinga", SSL on
> 2012-02-14 02:10:31 CET LOG:  connection received: host=::1 port=45714
> 2012-02-14 02:10:31 CET FATAL:  no pg_hba.conf entry for host "::1", user "icingaidoutils", database "icinga", SSL off
 
 We reworked sockethandling a bit in 1.7.x. Could you try if the bug is fixed
 for you? (Best in 1.8 that I'll upload soon)

 Alex

-- 
Alexander Wirt, formorer at formorer.de 
CC99 2DDD D39E 75B0 B0AA  B25C D35B BC99 BC7D 020A



More information about the Pkg-nagios-devel mailing list