Re: What does error "psql: Kerberos 5 authentication not supported" means?

BTW, is there a way to find out what particular configure options were used
for any given (binary) installation?

WBL

On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas(at)gmail(dot)com> wrote:

> Hi,
>
> I'm not quite sure but it probably means that postgresql was not built with
> kerberos 5 support.
> That would make sense if you are using a binary install (did not compile
> from source), because of the notice at
> http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
> "Note: Native Kerberos authentication has been deprecated and should be
> used only for backward compatibility. New and upgraded installations are
> encouraged to use the industry-standard GSSAPI authentication method (see
> Section 19.3.3) instead."
>
> hth,
>
> WBL
>
>
> On Wed, Mar 23, 2011 at 5:44 PM, <Yandong(dot)Yao(at)emc(dot)com> wrote:
>
>> Hi Guys,
>>
>> I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu
>> 10.10.
>>
>> When I use:
>> $ psql –h ubuntu.server –U gavin dbname
>>
>> I get following error:
>> psql: Kerberos 5 authentication not supported.
>>
>> And from the server side of postgresql, I could see following log:
>>
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
>> 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited
>> with exit code 0
>> 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
>> 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
>> 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
>> postgres: Software caused connection abort from krb5_recvauth
>> 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed
>> for user "gavin"
>> 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
>>
>> What does this means and how could I get more verbose logs?
>>
>> Besides, is there any more howto/doc on integrate kerberos and postgresql
>> besides the official documentation at
>> http://www.postgresql.org/docs/9.0/interactive/client-authentication.html
>> ?
>>
>>
>> Thanks very much in advance!
>>
>> Regards,
>> Yandong
>>
>>
>>
>> --
>> Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org)
>> To make changes to your subscription:
>> http://www.postgresql.org/mailpref/pgsql-admin
>>
>
>
>
> --
> "Patriotism is the conviction that your country is superior to all others
> because you were born in it." -- George Bernard Shaw
>

--
"Patriotism is the conviction that your country is superior to all others
because you were born in it." -- George Bernard Shaw