public inbox for [email protected]help / color / mirror / Atom feed
gssenc supported? 6+ messages / 3 participants [nested] [flat]
* gssenc supported? @ 2025-01-19 11:34 Troels Arvin <[email protected]> 0 siblings, 1 reply; 6+ messages in thread From: Troels Arvin @ 2025-01-19 11:34 UTC (permalink / raw) To: [email protected] Hello, I've just installed the latest pgAdmin for Windows on a Windows 11 PC. I'm trying to set up a connection to a Kerberos-enabled Postgres server where hostgssenc is the only connection type allowed. So in the connection definition in pgAdmin, I've set "gssencmode" to "require". When I then try to connect to the database server, I get the following error: connection is bad: gssencmode value "require" invalid when GSSAPI support is not compiled in So is there a way to have pgAdmin connect with gssenc (Kerberos-encrypted communication) enabled? -- Regards, Troels Arvin ^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported? @ 2025-01-20 04:55 Khushboo Vashi <[email protected]> parent: Troels Arvin <[email protected]> 0 siblings, 1 reply; 6+ messages in thread From: Khushboo Vashi @ 2025-01-20 04:55 UTC (permalink / raw) To: Troels Arvin <[email protected]>; +Cc: [email protected] Hi, On Sun, Jan 19, 2025 at 5:04 PM Troels Arvin <[email protected]> wrote: > Hello, > > I've just installed the latest pgAdmin for Windows on a Windows 11 PC. > I'm trying to set up a connection to a Kerberos-enabled Postgres server > where hostgssenc is the only connection type allowed. So in the > connection definition in pgAdmin, I've set "gssencmode" to "require". > When I then try to connect to the database server, I get the following > error: > > connection is bad: gssencmode value "require" invalid when GSSAPI > support is not compiled in > > So is there a way to have pgAdmin connect with gssenc > (Kerberos-encrypted communication) enabled? > > Have you tried connecting Postgres Server with PSQL? The error, *GSSAPI supports is not compiled* raised by PostgreSQL, not by pgAdmin. -- > Regards, > Troels Arvin > > > > > ^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported? @ 2025-01-21 16:51 Troels Arvin <[email protected]> parent: Khushboo Vashi <[email protected]> 0 siblings, 2 replies; 6+ messages in thread From: Troels Arvin @ 2025-01-21 16:51 UTC (permalink / raw) To: [email protected] Hello, Khushboo Vashi wrote: > Have you tried connecting Postgres Server with PSQL? Yes, I've tried the psql.exe which is shippe with pgadmin. And I've tried psql.exe from the latest Windows installer from https://www.enterprisedb.com/downloads/postgres-postgresql-downloads Both work when having hostnogssenc in pg_hba.conf. But both do not work when hostgssenc is used in pg_hba.conf. Does someone know why those binaries are not compiled with support for hostgssenc? -- Regards, Troels Arvin ^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported? @ 2025-01-22 05:56 Khushboo Vashi <[email protected]> parent: Troels Arvin <[email protected]> 1 sibling, 1 reply; 6+ messages in thread From: Khushboo Vashi @ 2025-01-22 05:56 UTC (permalink / raw) To: Troels Arvin <[email protected]>; +Cc: [email protected] On Tue, Jan 21, 2025 at 10:21 PM Troels Arvin <[email protected]> wrote: > Hello, > > Khushboo Vashi wrote: > > Have you tried connecting Postgres Server with PSQL? > > Yes, I've tried the psql.exe which is shippe with pgadmin. And I've > tried psql.exe from the latest Windows installer from > https://www.enterprisedb.com/downloads/postgres-postgresql-downloads > > Both work when having hostnogssenc in pg_hba.conf. But both do not work > when hostgssenc is used in pg_hba.conf. > > Does someone know why those binaries are not compiled with support for > hostgssenc? > > Refer, https://www.postgresql.org/docs/current/auth-pg-hba-conf.html It looks like your PostgreSQL server wasn't built with GSSAPI support. -- > Regards, > Troels Arvin > > > > > ^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported? @ 2025-01-22 07:30 Troels Arvin <[email protected]> parent: Khushboo Vashi <[email protected]> 0 siblings, 0 replies; 6+ messages in thread From: Troels Arvin @ 2025-01-22 07:30 UTC (permalink / raw) To: [email protected] Hello, Khushboo Vashi wrote: > It looks like your PostgreSQL server wasn't built with GSSAPI support. Oh, but it is: In output from the server's pg_config, it mentions --with-gssapi. And when I connect to the server from a Ubuntu or Fedora psql, my connection status indeed mentions GSS: ============================ aduser@dbclient:~$ psql -h dbserver.demo.troels.arvin.dk psql (16.6 (Ubuntu 16.6-0ubuntu0.24.10.1)) GSSAPI-encrypted connection Type "help" for help. aduser=# ============================ -- Regards, Troels Arvin ^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported? @ 2025-01-22 09:22 Dave Page <[email protected]> parent: Troels Arvin <[email protected]> 1 sibling, 0 replies; 6+ messages in thread From: Dave Page @ 2025-01-22 09:22 UTC (permalink / raw) To: Troels Arvin <[email protected]>; +Cc: [email protected] Hi On Tue, 21 Jan 2025 at 16:51, Troels Arvin <[email protected]> wrote: > Hello, > > Khushboo Vashi wrote: > > Have you tried connecting Postgres Server with PSQL? > > Yes, I've tried the psql.exe which is shippe with pgadmin. And I've > tried psql.exe from the latest Windows installer from > https://www.enterprisedb.com/downloads/postgres-postgresql-downloads > > Both work when having hostnogssenc in pg_hba.conf. But both do not work > when hostgssenc is used in pg_hba.conf. > > Does someone know why those binaries are not compiled with support for > hostgssenc? > We don't build the binaries that we ship with pgAdmin on Windows with GSSAPI support, for a couple of reasons. First, there's actually a long-standing bug [1] in PostgreSQL that prevents compilation on Windows with both MIT Kerberos and OpenSSL together (I've tried multiple backchannels to get that fix committed - please feel free to chime in on the thread). Secondly, people almost exclusively use SSPI on Windows. You are actually the first person I recall ever wanting GSSAPI support. FWIW, we ship MIT Kerberos anyway (for handling app logins). Adding GSSAPI support would be trivial, if the upstream bug were fixed. [1] https://www.postgresql.org/message-id/flat/CA%2BOCxoxwsgi8QdzN8A0OPGuGfu_1vEW3ufVBnbwd3gfawVpsXw%40m... -- Dave Page pgAdmin: https://www.pgadmin.org PostgreSQL: https://www.postgresql.org pgEdge: https://www.pgedge.com ^ permalink raw reply [nested|flat] 6+ messages in thread
end of thread, other threads:[~2025-01-22 09:22 UTC | newest] Thread overview: 6+ messages (download: mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2025-01-19 11:34 gssenc supported? Troels Arvin <[email protected]> 2025-01-20 04:55 ` Khushboo Vashi <[email protected]> 2025-01-21 16:51 ` Troels Arvin <[email protected]> 2025-01-22 05:56 ` Khushboo Vashi <[email protected]> 2025-01-22 07:30 ` Troels Arvin <[email protected]> 2025-01-22 09:22 ` Dave Page <[email protected]>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox