no pg_hba.conf entry for host (when adding an ePolicy Orchestrator System Name or IP to Threat Intelligence Exchange Server)

Technical Articles ID: KB86943
Last Modified: 8/3/2021

Environment

McAfee ePolicy Orchestrator (ePO) 5.x
McAfee ePolicy Orchestrator (ePO) 5.x running in Cluster Mode
McAfee Threat Intelligence Exchange (TIE) Server 3.x, 2.x

NOTE: For details about ePO in Cluster Mode, see the ePolicy Orchestrator Installation Guide.

Problem

When the TIE Server database is registered in the ePO console and the connection is tested to the registered TIE server database from the ePO console, it displays the following error:

Test failed: FATAL: no pg_hba.conf entry for host "cluster-node-host", user "readonly", database "tie", SSL on

The TIE Server database can be registered in the ePO console at Menu, Configuration, Registered Servers.

Cause

During the installation of TIE, the host entries of all ePO Servers (with or without the cluster) were not added manually to the pg_hba.conf file. So, all configured ePO Servers can't connect with a read-only user to retrieve the data for reports and dashboards.

Solution

To add each ePO node to the file pg_hba.conf:

Connect to the TIE Server using the root user and password.
Run the reconfig-pghba script with the following command:

reconfig-pghba
Specify the host name, or IP address, of each ePO node. The screenshot below shows the Reconfig Postgres pg_hba.conf screen with multiple ePO nodes specified:
Restart the TIE service with the following commands:
- service tieserver stop
- service tieserver start

Now when you register the TIE Server database in the ePO console at Menu, Configuration, Registered Servers, the test connection is successful.

Affected Products

Configuration
Threat Intelligence Exchange Server 3.x
Threat Intelligence Exchange Server 2.3.x
Threat Intelligence Exchange Server 2.2.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Knowledge Center

no pg_hba.conf entry for host (when adding an ePolicy Orchestrator System Name or IP to Threat Intelligence Exchange Server)

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

no pg_hba.conf entry for host (when adding an ePolicy Orchestrator System Name or IP to Threat Intelligence Exchange Server)

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title