Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

U22: pscheduler pause needs pscheduler user #1431

Open
laeti-tia opened this issue May 14, 2024 · 3 comments
Open

U22: pscheduler pause needs pscheduler user #1431

laeti-tia opened this issue May 14, 2024 · 3 comments
Assignees

Comments

@laeti-tia
Copy link
Member

When running pscheduler pause on an U22 machine, I get an authorisation error:

# pscheduler pause
Unable to connect to the database: connection to server on socket "/var/run/postgresql/.s.PGSQL.5432" failed: FATAL:  Peer authentication failed for user "pscheduler"

Running it as pscheduler is fine:

# sudo -u pscheduler pscheduler pause
Pausing indefinitely.
# sudo -u pscheduler pscheduler resume

This is probably coming from a change we did on 5.0.x to change a security setup.

@laeti-tia laeti-tia changed the title pscheduler pause needs pscheduler user U22: pscheduler pause needs pscheduler user May 14, 2024
@laeti-tia laeti-tia self-assigned this May 14, 2024
@mfeit-internet2
Copy link
Member

The client authentication file (/etc/postgresql/14/main/pg_hba.conf) is missing the lines required to allow authentication by anyone with the DSN.

This is how it's done in the RPM; this should work fine almost verbatim (change %{name} to pscheduler-server) on Debuntu:

I'll leave fixing this to you since you're our resident Debian maven.

@laeti-tia
Copy link
Member Author

I thought it was a new issue, but apparently on 4.4.6 it behaves the same for U18. At this stage I'd suggest we just adapt the documentation at https://docs.perfsonar.net/pscheduler_server_running.html#pausing-and-resuming to say that for RPM based distros it should be run with sudo and with Deb based ones it should be sudo -u pscheduler

@mfeit-internet2
Copy link
Member

I'm going to leave this open as a bug for 5.1.1. I doubt this feature gets used much, but it should work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Ready
Development

No branches or pull requests

2 participants