GSSAPI v9.01

From: dx k9 <bitsandbytes88(at)hotmail(dot)com>
To: posgres support <pgsql-admin(at)postgresql(dot)org>
Subject: GSSAPI v9.01
Date: 2010-12-06 15:50:46
Message-ID: SNT113-W17A4E9EA47D3573117CB0D12B0@phx.gbl
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Hi All,

I'm getting an error when trying to log into a database with gss( 1st time trying, see command below ). My postgres user name is bob and my system name is also bob to log into the SLES 9 or SLES 11 box. Although the active directory name is bob(at)domain(dot)com So, I'm not using pg_ident (user name maps) . Do I need to configure --wtih-kerberos, see way below in my configure command below. Maybe, both kerberos and gssapi are needed for gssapi, see configure command below.

Section 19.3.3 talks about include_realm, map and krb_realm but I'm not seeing those option in pg_hba. Is it referring to the krb5.conf file?

Thanks for any help,

~DjK

Version 9.01

psql -h server -U bob

psql: GSSAPI continuation error: Unspecified GSS failure. Minor code may provide more information
GSSAPI continuation error: Server not found in Kerberos database

# Trying different combinations here

# Kerberos and GSSAPI
#krb_server_keyfile = ''
krb_server_keyfile = '/tmp/'
krb_srvname = 'postgres' # (Kerberos only)
#krb_srvname = 'AD.DOMAIN.COM' # (Kerberos only)
#krb_caseins_users = off
krb_caseins_users = on

$ ./configure --prefix=/usr/local/pgsql.v901 --with-includes=/usr/local/include:/usr/local/ssl/include:/usr/local/krb/include:/usr/local/python-2.5.2/include --with-libraries=/usr/local/lib:/usr/local/ssl/lib:/usr/local/krb/lib:/usr/local/python-2.5.2/lib --with-perl --with-gssapi --with-python --with-openssl --with-libxml --enable-thread-safety

Browse pgsql-admin by date

  From Date Subject
Next Message Lukasz Brodziak 2010-12-06 18:44:23 COPY statement for linux server from windows client
Previous Message Lou Picciano 2010-12-06 14:02:57 Certificate location under Windows 7