pq: unknown authentication response: 10

[brunolnetto]

HI folks,

I am installing postgres_exporter on a Ubuntu Linux Machine, and stumbled on following error. Since it says pq: unknown authentication response: 10, I wonder if there is something unsual with the usage of pq by pg_exporter. Or maybe some (mis-)configuration from client side.

postgres_exporter[1886466]: time="2024-08-29T16:02:59-03:00" level=error msg="Error opening connection to database (postgresql://conexxoapi:PASSWORD_REMOVED@server1.conexxohub.com.br:5433/dadosrfb?sslmode=disable): pq: unknown authentication response: 10" source="postgres_exporter.go:1336"

[mark-tatarinov-develeap]

Hey @brunolnetto did you find a solution to this issue? I am getting the same error

[brunolnetto]

Unfortunately not. I assume, there is something to do with pg_hba.conf file. But this is a guess.

[mark-tatarinov-develeap]

I see, I guessed that too but because I am using RDS I don't have access to that file.
In my case there are 2 RDS instances, one is working fine with version 14.12 and the other gives this error with version 14.13.

What solved it for me, as a workaround is to set the password encryption for the exporter user to md5, which is a bit less secure but this is an RO user and I have no possibility to update pg_hba.conf, hope this helps in case you are still looking for at least something temporary.

Thanks!

[brunolnetto]

Nice, thanks for the clarifications! I will have that in mind in case I need to perform such cluster action. Regards!

[arp242]

The only place this error is sent is here:

pq/conn.go

Line 1416 in 57f291d

errorf("unknown authentication response: %d", code)

and 10 (SASL) is handled in that switch:

pq/conn.go

Line 1366 in 57f291d

case 10:

Looks like this was added in v1.1.0: 51e2106 (Aug 2018)

So I don't really understand how this could happen, unless you're using quite an old version of pq?