[prev in list] [next in list] [prev in thread] [next in thread] 

List:       slony1-general
Subject:    Re: [Slony1-general] 2.1.4 can't update pg_class as superuser
From:       Jeff Frost <jeff () pgexperts ! com>
Date:       2014-10-01 0:56:34
Message-ID: E63191F1-312E-487D-A8A0-EB93D85E5260 () pgexperts ! com
[Download RAW message or body]

[Attachment #2 (multipart/signed)]

[Attachment #4 (multipart/alternative)]


On Sep 30, 2014, at 5:05 PM, Jeff Frost <jeff@pgexperts.com> wrote:

> 
> On Sep 30, 2014, at 5:03 PM, Greg Sabino Mullane <greg@endpoint.com> wrote:
> 
> > On Tue, Sep 30, 2014 at 03:18:42PM -0700, Jeff Frost wrote:
> > > Seeing this error from finishTableAfterCopy:
> > > 
> > > PGRES_FATAL_ERROR ERROR:  permission denied for relation pg_class
> > > 
> > > slony 2.1.4 connecting to postgresql 9.2.9 as the slony user which is a \
> > > postgresql superuser. 
> > ...
> > > rolname        | slony
> > > rolsuper       | t
> > 
> > At the risk of stating the obvious, triple check the right role is 
> > being used. If your log_line_prefix has a %u, check that in the 
> > error message. Or try dropping the slony user and try rerunning. 
> > If that gives the expected error, double check it has rolsuper /and/ 
> > rolcatupdate set.
> 
> Yah, we log to csvlog and it's definitely using the slony user.  
> 
> I already tried dropping and recreating the role and the slon was unable to connect \
> until the role was recreated; however, still the same issue with the newly created \
> superuser role. 

Figured it out.

The ownership of the functions in the slony schema got reassigned.

Assigning them back to the slony user made it happy again.


[Attachment #7 (unknown)]

<html><head><meta http-equiv="Content-Type" content="text/html \
charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: \
space; -webkit-line-break: after-white-space;"><br><div><div>On Sep 30, 2014, at 5:05 \
PM, Jeff Frost &lt;<a href="mailto:jeff@pgexperts.com">jeff@pgexperts.com</a>&gt; \
wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div \
style="font-size: 12px; font-style: normal; font-variant: normal; font-weight: \
normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: \
start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br>On Sep 30, 2014, at 5:03 PM, \
Greg Sabino Mullane &lt;<a href="mailto:greg@endpoint.com">greg@endpoint.com</a>&gt; \
wrote:<br><br><blockquote type="cite">On Tue, Sep 30, 2014 at 03:18:42PM -0700, Jeff \
Frost wrote:<br><blockquote type="cite">Seeing this error from \
finishTableAfterCopy:<br><br>PGRES_FATAL_ERROR ERROR: &nbsp;permission denied for \
relation pg_class<br><br>slony 2.1.4 connecting to postgresql 9.2.9 as the slony user \
which is a postgresql superuser.<br><br></blockquote>...<br><blockquote \
type="cite">rolname &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;| slony<br>rolsuper \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;| t<br></blockquote><br>At the risk of stating \
the obvious, triple check the right role is<span \
class="Apple-converted-space">&nbsp;</span><br>being used. If your log_line_prefix \
has a %u, check that in the<span class="Apple-converted-space">&nbsp;</span><br>error \
message. Or try dropping the slony user and try rerunning.<span \
class="Apple-converted-space">&nbsp;</span><br>If that gives the expected error, \
double check it has rolsuper /and/<span \
class="Apple-converted-space">&nbsp;</span><br>rolcatupdate \
set.<br></blockquote><br>Yah, we log to csvlog and it's definitely using the slony \
user. &nbsp;<br><br>I already tried dropping and recreating the role and the slon was \
unable to connect until the role was recreated; however, still the same issue with \
the newly created superuser role.<br><br></div></blockquote><div><br></div>Figured it \
out.</div><div><br></div><div>The ownership of the functions in the slony schema got \
reassigned.</div><div><br></div><div>Assigning them back to the slony user made it \
happy again.</div><div><br><br></div><br></body></html>


["signature.asc" (signature.asc)]

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://www.gpgtools.org/

iEYEARECAAYFAlQrUUIACgkQbElkk0i3T39Q7ACePw5RZMqctfNj/8ZZnmfb5Ji9
XXEAoIY9qwRXB49lBtVt0kETtVZA4kfo
=GSuR
-----END PGP SIGNATURE-----


_______________________________________________
Slony1-general mailing list
Slony1-general@lists.slony.info
http://lists.slony.info/mailman/listinfo/slony1-general


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic