Connect to PostgreSQL

Property	Description
Connection Name	Name of the connection. Each connection name must be unique within the organization. Connection names can contain alphanumeric characters, spaces, and the following special characters: _ . + -, Maximum length is 255 characters.
Description	Description of the connection. Maximum length is 4000 characters.
Type	PostgreSQL
Runtime Environment	The name of the runtime environment where you want to run tasks. Select a Secure Agent, Hosted Agent, or serverless runtime environment. You cannot run a database ingestion and replication task on a Hosted Agent or in a serverless runtime environment.

Authentication types

Database authentication

To configure database authentication, you need the user name, password, host name, port, and database name from your PostgreSQL account.

The following table describes the basic connection properties for database authentication:

Property	Description
User Name	User name to access the PostgreSQL database.
Password	Password for the PostgreSQL database user name.
Host Name	Host name of the PostgreSQL server to which you want to connect.
Port	Port number for the PostgreSQL server to which you want to connect. Default is 5432.
Database Name	The PostgreSQL database name.

Kerberos authentication

To configure Kerberos authentication, you need the service principal name, host name, port, and database name from your PostgreSQL account.

The following table describes the basic connection properties for Kerberos authentication:

Property	Description
Service Principal Name	Service principal name that you want to use for Kerberos authentication. Specify the service principal name in the following format: <Service_Name>/<Fully_Qualified_Domain_Name>@<REALM.COM> - Service_Name is the name of the service hosting the instance. - Fully_Qualified_Domain_Name is the fully qualified domain name of the host machine. - REALM.COM is the domain name of the host machine. This value is optional. If you do not specify the realm name, the default realm is used.
Host Name	Host name of the PostgreSQL server to which you want to connect.
Port	Port number for the PostgreSQL server to which you want to connect. Default is 5432.
Database Name	The PostgreSQL database name.

The following table describes the advanced connection property for Kerberos authentication:

Property	Description
Additional Kerberos Properties	Additional connection properties to use Kerberos authentication to connect to PostgreSQL. Enter properties in the following format: <parameter name>=<parameter value> If you enter more than one property, separate each key-value pair with a semicolon.

Advanced settings

Property	Description
Schema Name	The schema name. If you don't specify the schema name, all the schemas available in the database are listed when you import the source object in Data Integration.
Connection Environment SQL	The SQL statement to set up the database environment when you connect to the database. The database environment applies for the entire session that uses this connection. For example, you can enter this statement to set the time zone: SET timezone to 'America/New_York';
Additional Connection Properties	Additional connection parameters that you want to use. Provide the connection parameters as semicolon-separated key-value pairs.

Encryption types

SSL

When you use the SSL encryption method, data is encrypted using SSL. If the PostgreSQL database server can't configure SSL, the connection fails.

The following table describes the advanced connection properties for SSL encryption:

Note: You need to select the Validate Server Certificate check box for some SSL properties, while others need client authentication enabled on the PostgreSQL server.

Property	Description
Validate Server Certificate	Determines if the Secure Agent validates the server certificate sent by the PostgreSQL database server. If you specify the Host Name In Certificate property, the Secure Agent also validates the host name in the certificate. Select this option to validate the server certificate.
Truststore	This property applies if you select the Validate Server Certificate option. The path and name of the truststore file, which contains the list of the Certificate Authorities (CAs) that the PostgreSQL client trusts. For the serverless runtime environment, specify the following certificate path in the serverless agent directory: /home/cldagnt/SystemAgent/serverless/configurations/ssl_store/<TrustStore_filename>
Truststore Password	This property applies if you select the Validate Server Certificate option. The password to access the truststore file that contains the SSL certificate.
Host Name In Certificate	Optional when you select the Validate Server Certificate option. A host name for providing additional security. The Secure Agent validates the host name included in the connection with the host name in the SSL certificate.
Keystore	This property applies when client authentication is enabled on the PostgreSQL database server. The path and the file name of the key store. The keystore file contains the certificates that the PostgreSQL client sends to the PostgreSQL server in response to the server's certificate request. For the serverless runtime environment, specify the following certificate path in the serverless agent directory: /home/cldagnt/SystemAgent/serverless/configurations/ssl_store/<KeyStore_filename>
Keystore Password	This property applies when client authentication is enabled on the PostgreSQL database server. The password for the keystore file required for secure communication.
Key Password	This property applies when client authentication is enabled on the PostgreSQL database server. Required when individual keys in the keystore file have a different password than the keystore file.
Use SSLv3	Uses SSLv3 as the cryptographic protocol for an encrypted connection.
Use TLSv1.2	Uses TLSv1.2 as the cryptographic protocol for an encrypted connection.

Request SSL

When you use the requestSSL encryption method, PostgreSQL attempts to establish a connection using SSL. If the PostgreSQL database server can't configure SSL, the Secure Agent establishes an unencrypted connection.

The following table describes the advanced connection properties for Request SSL encryption:

Property	Description
Validate Server Certificate	Determines if the Secure Agent validates the server certificate sent by the PostgreSQL database server. If you specify the Host Name In Certificate property, the Secure Agent also validates the host name in the certificate. Select this option to validate the server certificate.
Truststore	This property applies if you select the Validate Server Certificate option. The path and name of the truststore file, which contains the list of the Certificate Authorities (CAs) that the PostgreSQL client trusts. For the serverless runtime environment, specify the following certificate path in the serverless agent directory: /home/cldagnt/SystemAgent/serverless/configurations/ssl_store/<TrustStore_filename>
Truststore Password	This property applies if you select the Validate Server Certificate option. The password to access the truststore file that contains the SSL certificate.
Host Name In Certificate	Optional when you select the Validate Server Certificate option. A host name for providing additional security. The Secure Agent validates the host name included in the connection with the host name in the SSL certificate.
Use SSLv3	Uses SSLv3 as the cryptographic protocol for an encrypted connection.
Use TLSv1.2	Uses TLSv1.2 as the cryptographic protocol for an encrypted connection.