Confluence PostgreSQL JDBC direct connection refused
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Problem
The following appears in the atlassian-confluence.log file, indicating a connection refused when using Confluence with JDBC direct connection string:
1
org.postgresql.util.PSQLException: Connection refused. Check that the hostname and port are correct and that the postmaster is accepting TCP/IP connections.Diagnosis
Environment
PostgreSQL database
Diagnostic Steps
Here are some quick and handy diagnostic scripts:
1
ps -f -u postgres This should list the PostgreSQL processes in your environment:
1
sudo lsof -n -u postgres |grep LISTEN or sudo netstat -ltnp | grep postgresThis will show the TCP/IP addresses and ports that your instance of PostgreSQL is listening upon.
Cause
This is a configuration issue with PostgreSQL, not Confluence. The root cause is that the PostgreSQL pga_hba.conf file is not set to TRUST versus IDENT as usually found under:
1
/var/lib/pgsql/data/pg_hba.confand shown herein below:
1
2
3
4
5
6
7
8
9
10
11
# TYPE DATABASE USER CIDR-ADDRESS METHOD
# "local" is for Unix domain socket connections only
local all all ident
# IPv4 local connections:
host all all 127.0.0.1/32 ident
host all all 100.200.300.50/32 ident
# IPv6 local connections:
host all all ::1/128 identIP address range 100.200.300.50/32 is only used herein for purposes of example, please do not use that address.
Resolution
Open the file
/var/lib/psql/pg_hba.confin your favorite text editor of choice with appropriate permissionsYou may have to use sudo to obtain the correct permissions to edit and save the file as needed
Edit the file, altering the values written as IDENT above to TRUST as shown below
1 2 3 4 5 6 7 8 9 10 11# TYPE DATABASE USER CIDR-ADDRESS METHOD # "local" is for Unix domain socket connections only local all all trust # IPv4 local connections: host all all 127.0.0.1/32 trust host all all 100.200.300.50/32 trust # IPv6 local connections: host all all ::1/128 ident
Was this helpful?