Re: What does error "psql: Kerberos 5 authentication not supported" means?

On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos <willybas(at)gmail(dot)com> wrote:

> BTW, is there a way to find out what particular configure options were used
> for any given (binary) installation?
>
>

The *pg_config* utility prints configuration parameters of the currently
installed version of PostgreSQL

*--configure*

Print the options that were given to the *configure* script when PostgreSQL
was configured for building. This can be used to reproduce the identical
configuration, or to find out with what options a binary package was built.

--Raghu Ram

> WBL
>
>
> On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas(at)gmail(dot)com>wrote:
>
>> Hi,
>>
>> I'm not quite sure but it probably means that postgresql was not built
>> with kerberos 5 support.
>> That would make sense if you are using a binary install (did not compile
>> from source), because of the notice at
>> http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
>> "Note: Native Kerberos authentication has been deprecated and should be
>> used only for backward compatibility. New and upgraded installations are
>> encouraged to use the industry-standard GSSAPI authentication method (see
>> Section 19.3.3) instead."
>>
>> hth,
>>
>> WBL
>>
>>
>> On Wed, Mar 23, 2011 at 5:44 PM, <Yandong(dot)Yao(at)emc(dot)com> wrote:
>>
>>> Hi Guys,
>>>
>>> I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu
>>> 10.10.
>>>
>>> When I use:
>>> $ psql –h ubuntu.server –U gavin dbname
>>>
>>> I get following error:
>>> psql: Kerberos 5 authentication not supported.
>>>
>>> And from the server side of postgresql, I could see following log:
>>>
>>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
>>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to
>>> make
>>> 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
>>> 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited
>>> with exit code 0
>>> 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
>>> 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
>>> 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
>>> postgres: Software caused connection abort from krb5_recvauth
>>> 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed
>>> for user "gavin"
>>> 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
>>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
>>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
>>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to
>>> make
>>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
>>>
>>> What does this means and how could I get more verbose logs?
>>>
>>> Besides, is there any more howto/doc on integrate kerberos and postgresql
>>> besides the official documentation at
>>> http://www.postgresql.org/docs/9.0/interactive/client-authentication.html
>>> ?
>>>
>>>
>>> Thanks very much in advance!
>>>
>>> Regards,
>>> Yandong
>>>
>>>
>>>
>>> --
>>> Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org)
>>> To make changes to your subscription:
>>> http://www.postgresql.org/mailpref/pgsql-admin
>>>
>>
>>
>>
>> --
>> "Patriotism is the conviction that your country is superior to all others
>> because you were born in it." -- George Bernard Shaw
>>
>
>
>
> --
> "Patriotism is the conviction that your country is superior to all others
> because you were born in it." -- George Bernard Shaw
>