HA Configuration Active-Passive

Hello,

During the HA configuration of two servers where NPS version 4.2.1632 was installed, and following the guide at Netwrix Documentation, we encountered connection errors between the two servers. We are uncertain about how to proceed with the installation. Should the second server be configured first, or is that unnecessary? Must the second database be “clean”? What does the error in the image, “28P01: password authentication failed for user ‘repuser’,” signify?

Thank you in advance for your assistance.

Hello Josephine,

Welcome to the Netwrix Community!

I’m sorry to hear you’ve experiencing difficulties with Privilege Secure’s High Availability functionality. I think it would be helpful for our Support Team to take a look at your environment to troubleshoot, but you’ll need to create a ticket first.

Do you mind creating one?

- Dan

I contacted support regarding the issue with the HA setup, and I felt fully supported throughout the session. Thanks to their guidance, we were able to identify and resolve the problem successfully.

Here’s a summary of what we accomplished during the session:

  • Confirmed the status of PG16 services
  • Reviewed the postgresql.conf file and confirmed it was correctly configured
  • Updated the PostgresHost property in appsettings.json with the Primary server’s IP address
  • Copied the updated file to the Secondary server
  • Reviewed the pg_hba.conf file and added the following lines:
host    replication    all     127.0.0.1/32    md5  
host    replication    all     ::1/128         md5
  • Re-launched the HA tool on both nodes and completed the configuration successfully

The issue was caused by missing entries in pg_hba.conf that prevented local replication connections. Adding the appropriate md5 authentication lines allowed the replication user to authenticate locally, enabling the HA tool to complete the configuration.

2 Likes

Thank you for the update, Josephine! I’m glad to hear our Support team was able to assist you and get this issue resolved :+1:

1 Like