Help Center/ DataArts Studio/ FAQs/ DataArts Migration (Real-Time Jobs)/ What Should I Do If Error "no gs_hba.conf entry for replication connection from host "xxxx", user "xxx", SSL off" Is Reported During Incremental Synchronization from GaussDB?
Updated on 2025-11-17 GMT+08:00

What Should I Do If Error "no gs_hba.conf entry for replication connection from host "xxxx", user "xxx", SSL off" Is Reported During Incremental Synchronization from GaussDB?

Symptom

Error "no gs_hba.conf entry for replication connection from host "xxxx", user "xxx", SSL off" is reported during incremental synchronization from GaussDB.

Possible Causes

The resource group network segment is not contained in the whitelist in the configuration file.

Solution

  1. Check whether the value of parameter wal_level for the source database is logical.
    Figure 1 Checking the parameter
  2. Configures the GaussDB connection whitelist.

    In the following configuration, user indicates the account (username configured in the data connection) used by the real-time synchronization job. ip indicates the resource group network segment. You can set ip to 0.0.0.0/0 so that you do not need to set it repeatedly later.

    • Centralized: Add host all <user> <ip> sha256 and host replication <user> <ip> sha256 to the gs_hba.conf configuration file of the source database.
    • Distributed: Add host all <user> <ip> sha256 to the gs_hba.conf configuration file of the CN node of the source database. Add host all <user> <ip> sha256 and host replication <user><ip> sha256 to the gs_hba.conf configuration file of the DN node of the source database.
    • Run select pg_reload_conf(); in the source database as the system administrator, or restart the DB instance to apply the changes.