Everything is good for the ssh connectivity from the slave to the master but not from the master to the slave.
On the master : -bash-4.2$ ssh postgres@10.0.2.67 (slaveIP) Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
-bash-4.2$
-bash-4.2$ ssh-copy-id -i id_rsa.pub postgres@10.0.2.67
--------
On the slave : -bash-4.2$ ssh postgres@10.1.24.13 (masterIP) postgres@10.1.24.13's password: Last failed login: Tue Jun 5 10:10:19 EDT 2018 from slave on ssh:notty There were 44 failed login attempts since the last successful login. Last login: Tue Jun 5 09:48:42 2018 from slave -bash-4.2$ exit logout
De : Jorge Torralba <jorge.torralba@xxxxxxxxx>
Envoyé : mardi 5 juin 2018 16:02 À : Johannes Truschnigg Cc : Pierre Ochsenbein; pgsql-admin@xxxxxxxxxxxxxxxxxxxx Objet : Re: PostgreSQL Streaming replication on two diff networks >No;
not if there's not even basic IP connectivity between the participating
hosts. Pierre will have to make sure he gets the routing between the two sites fixed (which is probably going to need some kind of VPN solution).< You are correct. But, I am assuming all routing, vpn's, iptables etc are configured since it is a known network to the user. He will still need entrie in pg_hba.conf.
JT
On Tue, Jun 5, 2018 at 6:43 AM, Johannes Truschnigg
<johannes@xxxxxxxxxxxxxxx> wrote:
On Tue, Jun 05, 2018 at 06:39:42AM -0700, Jorge Torralba wrote: Thanks,
Jorge Torralba ---------------------------- Note: This communication may contain privileged or other confidential information. If you are not the intended recipient, please do not print, copy, retransmit, disseminate or otherwise use the information. Please indicate to the sender that you have received this email in error and delete the copy you received. Thank You. Acceleris AG | cloudifying IT
Pierre Ochsenbein | Technical Consultant Schosshaldenstrasse 85 | CH-3006 Bern T : +41 31 911 33 22 | F : +41 31 911 62 63 pierre.ochsenbein@xxxxxxxxxxxx | www.acceleris.ch Acceleris Offices are in : Bern | Zurich | Renens | Bucharest Disclaimer This message possibly contains confidential data or items of information. It is intended solely for the rightful recipient. If you should have received the message wrongfully, it is not permitted to disclose the e-mail message or its contents to third parties, to copy or use it. We would respectfully request you to destroy the message with the exclusion of any reproduction and to notify this to the originator by e-mail. Thank you very much. |