Thread

  1. Adding an example for replication configuration to pg_hba.conf

    Selena Deckelmann <selena@chesnok.com> — 2011-05-18T16:17:23Z

    I reviewed the process for configuring replication, and found that we
    don't have an example for allowing replication access in pg_hba.conf.
    Before we release 9.1, I think we should add this example to make it
    more obvious this is a necessary part of replication configuration.
    
    At the risk of starting an epic bikeshedding thread, I've attached a
    small patch that includes an example for both ipv4 and ipv6 localhost
    configuration.
    
    -selena
    
    -- 
    http://chesnok.com
    
  2. Re: Adding an example for replication configuration to pg_hba.conf

    Selena Deckelmann <selena@chesnok.com> — 2011-05-18T16:30:10Z

    And this patch is aligned in a more pleasing way.
    
    -selena
    
    
    -- 
    http://chesnok.com
    
  3. Re: Adding an example for replication configuration to pg_hba.conf

    Christopher Browne <cbbrowne@gmail.com> — 2011-05-18T16:35:46Z

    On Wed, May 18, 2011 at 12:17 PM, Selena Deckelmann <selena@chesnok.com> wrote:
    > At the risk of starting an epic bikeshedding thread, I've attached a
    > small patch that includes an example for both ipv4 and ipv6 localhost
    > configuration.
    
    My "bikeshedding" would be to ensure that the sample pg_hba.conf
    includes some kind of reference comment indicating where to look in
    the documentation for more about this.  Section numbers aren't stable
    enough; section title is probably apropos.
    
    The most relevant docs seem to be "Preparing the Master for Standby Servers"
    http://www.postgresql.org/docs/9.1/static/warm-standby.html#PREPARING-MASTER-FOR-STANDBY
    or
    
    Streaming Replication Authentication
    http://www.postgresql.org/docs/9.1/static/warm-standby.html#STREAMING-REPLICATION-AUTHENTICATION
    -- 
    When confronted by a difficult problem, solve it by reducing it to the
    question, "How would the Lone Ranger handle this?"
    
    
  4. Re: Adding an example for replication configuration to pg_hba.conf

    Selena Deckelmann <selena@chesnok.com> — 2011-05-18T17:23:11Z

    On Wed, May 18, 2011 at 9:35 AM, Christopher Browne <cbbrowne@gmail.com> wrote:
    > On Wed, May 18, 2011 at 12:17 PM, Selena Deckelmann <selena@chesnok.com> wrote:
    >> At the risk of starting an epic bikeshedding thread, I've attached a
    >> small patch that includes an example for both ipv4 and ipv6 localhost
    >> configuration.
    >
    > My "bikeshedding" would be to ensure that the sample pg_hba.conf
    > includes some kind of reference comment indicating where to look in
    > the documentation for more about this.  Section numbers aren't stable
    > enough; section title is probably apropos.
    
    We don't do this in any of the other configuration files, so while I
    like the focus on helping users out, it would be a significant
    departure from convention.
    
    Creating an annotated config file in the wiki would be welcome. :)
    
    -selena
    
    -- 
    http://chesnok.com
    
    
  5. Re: Adding an example for replication configuration to pg_hba.conf

    Greg Smith <greg@2ndquadrant.com> — 2011-05-19T03:07:13Z

    Two things that could be changed from this example to make it more useful:
    
    -Document at least a little bit more how this is different from the 
    "all/all" rule.  I can imagine users wondering "do I use this instead of 
    the other one?  In addition?  Is it redundant if I have 'all' in there?  
    A little more description here aiming at the expected FAQs here would 
    make this much more useful.
    
    -The default database is based on your user name, which is postgres in 
    most packaged builds but not if you compile your own.  I don't know 
    whether it's practical to consider substituting that into this file, or 
    if it's just enough to mention that as an additional doc comment.
    
    -- 
    Greg Smith   2ndQuadrant US    greg@2ndQuadrant.com   Baltimore, MD
    PostgreSQL Training, Services, and 24x7 Support  www.2ndQuadrant.us
    
    
    
    
  6. Re: Adding an example for replication configuration to pg_hba.conf

    Alvaro Herrera <alvherre@commandprompt.com> — 2011-05-19T03:20:32Z

    Excerpts from Greg Smith's message of mié may 18 23:07:13 -0400 2011:
    > Two things that could be changed from this example to make it more useful:
    
    > -The default database is based on your user name, which is postgres in 
    > most packaged builds but not if you compile your own.  I don't know 
    > whether it's practical to consider substituting that into this file, or 
    > if it's just enough to mention that as an additional doc comment.
    
    You mean the default username, not the default database, but yeah; so do
    we need a @default_username@ token to be replaced by initdb with
    whatever it has as effective_user?  (In this case the patch is no longer
    2 lines, but still should be trivial enough).
    
    -- 
    Álvaro Herrera <alvherre@commandprompt.com>
    The PostgreSQL Company - Command Prompt, Inc.
    PostgreSQL Replication, Consulting, Custom Development, 24x7 support
    
    
  7. Re: Adding an example for replication configuration to pg_hba.conf

    Selena Deckelmann <selena@chesnok.com> — 2011-05-19T14:44:40Z

    On Wed, May 18, 2011 at 8:20 PM, Alvaro Herrera
    <alvherre@commandprompt.com> wrote:
    > Excerpts from Greg Smith's message of mié may 18 23:07:13 -0400 2011:
    >> Two things that could be changed from this example to make it more useful:
    >
    >> -The default database is based on your user name, which is postgres in
    >> most packaged builds but not if you compile your own.  I don't know
    >> whether it's practical to consider substituting that into this file, or
    >> if it's just enough to mention that as an additional doc comment.
    >
    > You mean the default username, not the default database, but yeah; so do
    > we need a @default_username@ token to be replaced by initdb with
    > whatever it has as effective_user?  (In this case the patch is no longer
    > 2 lines, but still should be trivial enough).
    
    That would be nice. So, we just add that token to initdb? Seems simple.
    
    I added some explanation of the all vs replication bit in the header comments.
    
    Revision attached.
    
    -selena
    
    -- 
    http://chesnok.com
    
  8. Re: Adding an example for replication configuration to pg_hba.conf

    Dave Page <dpage@pgadmin.org> — 2011-05-19T15:09:43Z

    On Thu, May 19, 2011 at 2:44 PM, Selena Deckelmann <selena@chesnok.com> wrote:
    > On Wed, May 18, 2011 at 8:20 PM, Alvaro Herrera
    > <alvherre@commandprompt.com> wrote:
    >> Excerpts from Greg Smith's message of mié may 18 23:07:13 -0400 2011:
    >>> Two things that could be changed from this example to make it more useful:
    >>
    >>> -The default database is based on your user name, which is postgres in
    >>> most packaged builds but not if you compile your own.  I don't know
    >>> whether it's practical to consider substituting that into this file, or
    >>> if it's just enough to mention that as an additional doc comment.
    >>
    >> You mean the default username, not the default database, but yeah; so do
    >> we need a @default_username@ token to be replaced by initdb with
    >> whatever it has as effective_user?  (In this case the patch is no longer
    >> 2 lines, but still should be trivial enough).
    >
    > That would be nice. So, we just add that token to initdb? Seems simple.
    >
    > I added some explanation of the all vs replication bit in the header comments.
    >
    > Revision attached.
    
    Looks good to me.
    
    As I mentioned offlist, I'd like it in teal please.
    
    
    -- 
    Dave Page
    Blog: http://pgsnake.blogspot.com
    Twitter: @pgsnake
    
    EnterpriseDB UK: http://www.enterprisedb.com
    The Enterprise PostgreSQL Company
    
    
  9. Re: Adding an example for replication configuration to pg_hba.conf

    Magnus Hagander <magnus@hagander.net> — 2011-05-19T18:05:54Z

    On Thu, May 19, 2011 at 11:09, Dave Page <dpage@pgadmin.org> wrote:
    > On Thu, May 19, 2011 at 2:44 PM, Selena Deckelmann <selena@chesnok.com> wrote:
    >> On Wed, May 18, 2011 at 8:20 PM, Alvaro Herrera
    >> <alvherre@commandprompt.com> wrote:
    >>> Excerpts from Greg Smith's message of mié may 18 23:07:13 -0400 2011:
    >>>> Two things that could be changed from this example to make it more useful:
    >>>
    >>>> -The default database is based on your user name, which is postgres in
    >>>> most packaged builds but not if you compile your own.  I don't know
    >>>> whether it's practical to consider substituting that into this file, or
    >>>> if it's just enough to mention that as an additional doc comment.
    >>>
    >>> You mean the default username, not the default database, but yeah; so do
    >>> we need a @default_username@ token to be replaced by initdb with
    >>> whatever it has as effective_user?  (In this case the patch is no longer
    >>> 2 lines, but still should be trivial enough).
    >>
    >> That would be nice. So, we just add that token to initdb? Seems simple.
    >>
    >> I added some explanation of the all vs replication bit in the header comments.
    >>
    >> Revision attached.
    >
    > Looks good to me.
    >
    > As I mentioned offlist, I'd like it in teal please.
    
    Applied with some further minor bikeshedding (remove trailing spaces,
    rewrap so columns aren't wider than 80 chars, etc)
    
    -- 
     Magnus Hagander
     Me: http://www.hagander.net/
     Work: http://www.redpill-linpro.com/
    
    
  10. Re: Adding an example for replication configuration to pg_hba.conf

    Bruce Momjian <bruce@momjian.us> — 2011-05-24T14:53:49Z

    Magnus Hagander wrote:
    > On Thu, May 19, 2011 at 11:09, Dave Page <dpage@pgadmin.org> wrote:
    > > On Thu, May 19, 2011 at 2:44 PM, Selena Deckelmann <selena@chesnok.com> wrote:
    > >> On Wed, May 18, 2011 at 8:20 PM, Alvaro Herrera
    > >> <alvherre@commandprompt.com> wrote:
    > >>> Excerpts from Greg Smith's message of mi? may 18 23:07:13 -0400 2011:
    > >>>> Two things that could be changed from this example to make it more useful:
    > >>>
    > >>>> -The default database is based on your user name, which is postgres in
    > >>>> most packaged builds but not if you compile your own. ?I don't know
    > >>>> whether it's practical to consider substituting that into this file, or
    > >>>> if it's just enough to mention that as an additional doc comment.
    > >>>
    > >>> You mean the default username, not the default database, but yeah; so do
    > >>> we need a @default_username@ token to be replaced by initdb with
    > >>> whatever it has as effective_user? ?(In this case the patch is no longer
    > >>> 2 lines, but still should be trivial enough).
    > >>
    > >> That would be nice. So, we just add that token to initdb? Seems simple.
    > >>
    > >> I added some explanation of the all vs replication bit in the header comments.
    > >>
    > >> Revision attached.
    > >
    > > Looks good to me.
    > >
    > > As I mentioned offlist, I'd like it in teal please.
    > 
    > Applied with some further minor bikeshedding (remove trailing spaces,
    > rewrap so columns aren't wider than 80 chars, etc)
    
    Let me just point out that people who have already run initdb during
    beta will not see this in their pg_hba.conf, nor in their
    share/pg_hba.conf.sample, even after they have upgraded to a later beta,
    unless they run initdb.  However, we have bumped the catalog version for
    something else so they should then get this change.
    
    My point is if we change configuration files and then don't bump the
    catalog version, the share/*.sample files get out of sync with the files
    in /data, which can be kind of confusing.
    
    -- 
      Bruce Momjian  <bruce@momjian.us>        http://momjian.us
      EnterpriseDB                             http://enterprisedb.com
    
      + It's impossible for everything to be true. +
    
    
  11. Re: Adding an example for replication configuration to pg_hba.conf

    Magnus Hagander <magnus@hagander.net> — 2011-05-24T15:09:07Z

    On Tue, May 24, 2011 at 10:53, Bruce Momjian <bruce@momjian.us> wrote:
    > Magnus Hagander wrote:
    >> On Thu, May 19, 2011 at 11:09, Dave Page <dpage@pgadmin.org> wrote:
    >> > On Thu, May 19, 2011 at 2:44 PM, Selena Deckelmann <selena@chesnok.com> wrote:
    >> >> On Wed, May 18, 2011 at 8:20 PM, Alvaro Herrera
    >> >> <alvherre@commandprompt.com> wrote:
    >> >>> Excerpts from Greg Smith's message of mi? may 18 23:07:13 -0400 2011:
    >> >>>> Two things that could be changed from this example to make it more useful:
    >> >>>
    >> >>>> -The default database is based on your user name, which is postgres in
    >> >>>> most packaged builds but not if you compile your own. ?I don't know
    >> >>>> whether it's practical to consider substituting that into this file, or
    >> >>>> if it's just enough to mention that as an additional doc comment.
    >> >>>
    >> >>> You mean the default username, not the default database, but yeah; so do
    >> >>> we need a @default_username@ token to be replaced by initdb with
    >> >>> whatever it has as effective_user? ?(In this case the patch is no longer
    >> >>> 2 lines, but still should be trivial enough).
    >> >>
    >> >> That would be nice. So, we just add that token to initdb? Seems simple.
    >> >>
    >> >> I added some explanation of the all vs replication bit in the header comments.
    >> >>
    >> >> Revision attached.
    >> >
    >> > Looks good to me.
    >> >
    >> > As I mentioned offlist, I'd like it in teal please.
    >>
    >> Applied with some further minor bikeshedding (remove trailing spaces,
    >> rewrap so columns aren't wider than 80 chars, etc)
    >
    > Let me just point out that people who have already run initdb during
    > beta will not see this in their pg_hba.conf, nor in their
    > share/pg_hba.conf.sample, even after they have upgraded to a later beta,
    > unless they run initdb.  However, we have bumped the catalog version for
    > something else so they should then get this change.
    
    Why would they not see it in their share/pg_hba.conf.sample?
    
    It will not affect the existing one in $PGDATA, but why wouldn't the
    installed .sample change?
    
    > My point is if we change configuration files and then don't bump the
    > catalog version, the share/*.sample files get out of sync with the files
    > in /data, which can be kind of confusing.
    
    They would - but what you are saying above is that they would not get
    out of sync, because the share/*.sample also don't update. Just a
    mistake in what you said above, or am I missing something?
    
    
    -- 
     Magnus Hagander
     Me: http://www.hagander.net/
     Work: http://www.redpill-linpro.com/
    
    
  12. Re: Adding an example for replication configuration to pg_hba.conf

    Bruce Momjian <bruce@momjian.us> — 2011-05-24T18:48:36Z

    Magnus Hagander wrote:
    > >> > As I mentioned offlist, I'd like it in teal please.
    > >>
    > >> Applied with some further minor bikeshedding (remove trailing spaces,
    > >> rewrap so columns aren't wider than 80 chars, etc)
    > >
    > > Let me just point out that people who have already run initdb during
    > > beta will not see this in their pg_hba.conf, nor in their
    > > share/pg_hba.conf.sample, even after they have upgraded to a later beta,
    
    Oops, yes, I was wrong here.  Sorry.
    
    > > unless they run initdb. ?However, we have bumped the catalog version for
    > > something else so they should then get this change.
    > 
    > Why would they not see it in their share/pg_hba.conf.sample?
    > 
    > It will not affect the existing one in $PGDATA, but why wouldn't the
    > installed .sample change?
    
    Yes, the problem is the sample will change, but the $PGDATA will not, so
    anyone doing a diff of the two files to see the localized changes will
    see the changes that came in as part of that commit.
    
    > > My point is if we change configuration files and then don't bump the
    > > catalog version, the share/*.sample files get out of sync with the files
    > > in /data, which can be kind of confusing.
    > 
    > They would - but what you are saying above is that they would not get
    > out of sync, because the share/*.sample also don't update. Just a
    > mistake in what you said above, or am I missing something?
    
    Yes, my mistake.
    
    -- 
      Bruce Momjian  <bruce@momjian.us>        http://momjian.us
      EnterpriseDB                             http://enterprisedb.com
    
      + It's impossible for everything to be true. +
    
    
  13. Re: Adding an example for replication configuration to pg_hba.conf

    Robert Haas <robertmhaas@gmail.com> — 2011-05-24T19:05:18Z

    On Tue, May 24, 2011 at 2:48 PM, Bruce Momjian <bruce@momjian.us> wrote:
    > Yes, the problem is the sample will change, but the $PGDATA will not, so
    > anyone doing a diff of the two files to see the localized changes will
    > see the changes that came in as part of that commit.
    
    I don't think that's a serious problem.  I wouldn't want to make a
    change like that in a released version, but doing it during beta seems
    OK.
    
    -- 
    Robert Haas
    EnterpriseDB: http://www.enterprisedb.com
    The Enterprise PostgreSQL Company
    
    
  14. Re: Adding an example for replication configuration to pg_hba.conf

    Tom Lane <tgl@sss.pgh.pa.us> — 2011-05-24T19:28:04Z

    Robert Haas <robertmhaas@gmail.com> writes:
    > On Tue, May 24, 2011 at 2:48 PM, Bruce Momjian <bruce@momjian.us> wrote:
    >> Yes, the problem is the sample will change, but the $PGDATA will not, so
    >> anyone doing a diff of the two files to see the localized changes will
    >> see the changes that came in as part of that commit.
    
    > I don't think that's a serious problem.  I wouldn't want to make a
    > change like that in a released version, but doing it during beta seems
    > OK.
    
    Given that we've already forced initdb for beta2, it seems like a
    complete non-issue right now, anyway.
    
    			regards, tom lane
    
    
  15. Re: Adding an example for replication configuration to pg_hba.conf

    Bruce Momjian <bruce@momjian.us> — 2011-05-24T20:01:35Z

    Tom Lane wrote:
    > Robert Haas <robertmhaas@gmail.com> writes:
    > > On Tue, May 24, 2011 at 2:48 PM, Bruce Momjian <bruce@momjian.us> wrote:
    > >> Yes, the problem is the sample will change, but the $PGDATA will not, so
    > >> anyone doing a diff of the two files to see the localized changes will
    > >> see the changes that came in as part of that commit.
    > 
    > > I don't think that's a serious problem.  I wouldn't want to make a
    > > change like that in a released version, but doing it during beta seems
    > > OK.
    > 
    > Given that we've already forced initdb for beta2, it seems like a
    > complete non-issue right now, anyway.
    
    Yes, agreed.  I was just pointing it out because people often don't
    realize the effect this has.
    
    -- 
      Bruce Momjian  <bruce@momjian.us>        http://momjian.us
      EnterpriseDB                             http://enterprisedb.com
    
      + It's impossible for everything to be true. +