no pg_hba.conf entry for host (when adding an ePolicy Orchestrator System Name or IP to the Threat Intelligence Exchange Server)

Technical Articles ID: KB86943
Last Modified: 2023-05-19 09:04:18 Etc/GMT

Environment

ePolicy Orchestrator (ePO) 5.x
ePO 5.x running in Cluster Mode
Threat Intelligence Exchange (TIE) Server 3.x, 2.x

NOTE: For details about ePO in Cluster Mode, see the ePolicy Orchestrator Installation Guide.

Problem

When the TIE Server database is registered in the ePO console and the connection is tested to the registered TIE server database from the ePO console, it displays the following error:

Test failed: FATAL: no pg_hba.conf entry for host "cluster-node-host", user "readonly", database "tie", SSL on

The TIE Server database can be registered in the ePO console at Menu, Configuration, Registered Servers.

Cause

During the TIE installation, the host entries of all ePO Servers (with or without the cluster) aren't added manually to the pg_hba.conf file. So, all configured ePO Servers can't connect with a read-only user to retrieve the data for reports and dashboards.

Solution

To add each ePO node to the file pg_hba.conf:

Connect to the TIE Server using the root user and password.
Run the reconfig-pghba script using the following command:

reconfig-pghba
Specify the host name or IP address of each ePO node. The screenshot below shows the Reconfig Postgres pg_hba.conf screen with multiple ePO nodes specified:
Restart the TIE service using the following commands:
- service tieserver stop
- service tieserver start

Now, when you register the TIE Server database in the ePO console at Menu, Configuration, Registered Servers, the test connection is successful.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

no pg_hba.conf entry for host (when adding an ePolicy Orchestrator System Name or IP to the Threat Intelligence Exchange Server)

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

no pg_hba.conf entry for host (when adding an ePolicy Orchestrator System Name or IP to the Threat Intelligence Exchange Server)

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title