Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1txPWe-008sno-TT for pgadmin-support@arkaria.postgresql.org; Wed, 26 Mar 2025 12:06:29 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1txPWd-002ZP1-Jf for pgadmin-support@arkaria.postgresql.org; Wed, 26 Mar 2025 12:06:27 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1txPWd-002ZOs-9T for pgadmin-support@lists.postgresql.org; Wed, 26 Mar 2025 12:06:27 +0000 Received: from mail-yw1-x1136.google.com ([2607:f8b0:4864:20::1136]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1txPWZ-001IkN-1a for pgadmin-support@lists.postgresql.org; Wed, 26 Mar 2025 12:06:26 +0000 Received: by mail-yw1-x1136.google.com with SMTP id 00721157ae682-6ff2adbba3fso50360357b3.2 for ; Wed, 26 Mar 2025 05:06:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb.com; s=google; t=1742990781; x=1743595581; darn=lists.postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=4FHwf8oDKacCLrm6eutmpyY7kIyZOZ4vOnhcCDlhq4E=; b=ZVjutBR+tHKQ+MRPNeBz61vJi3mL2xoKvK2zGFx96o1NXIVA401A+dnoNOaCqVtcAF Wv14dnqSItBGdM8kFN4S2QWpazkb4n1eUjYvZjPY8ScLozM1A00idNfsE1zPKQZSds4N bW3rtD/ilWF7yr/Jbu650v26z+RXM073NrIFWzijK3/zMk5wOt9AQWv/3EEFqn5iwJ7D sMLgumH+bQdAw3dZIBtuRx+ked6Q2Qt+zYgL8ttxGcxCwdZ6xNu4z/ankLLotEBPLSoM oMg6sMcqtDYaqMiMI++svJfQ/P1vYrYbXI/siicXBnXu+3nTXD8UKVbpp7LEYmHXJqRy Ggmg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1742990781; x=1743595581; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=4FHwf8oDKacCLrm6eutmpyY7kIyZOZ4vOnhcCDlhq4E=; b=FcBEhaSbyqUxATXNyz/zHSeV/cP20Z7oW5WOf6VTD4dkJOfvbOaleR2cvM/cnsiblp A2MXNBfvTyjjqJDuERlEuvKyKXciZlrML+OrgPYpIUcm0gF48/J774qRqscHsZJ2O/q3 0XPAUxf7Fg2c58n9QyAp1MiRs86U92UTA0y9ORH+ci/F9ucHzdvFDTvzUAfUAeau2OlT 8yvZjCtsa5PKKdUhzLyB6shpUcHitsFTPOE/AkXdwzaUcNVMvIB5id5CsHAHWTPFbQ3k 1U4d8K7/8t+qBz+Rm2W6D0ri08EllAjwBpPHUb1Nrp/1koPQmj6ZlkgWZxDGdojbcj+G lKIg== X-Gm-Message-State: AOJu0YyRe+84yvu+syHJ8E2F10Tmgk+FtdLknPJ5Z4BocCBeS+SfwhJA sqcmvislyr7QYtBrvdoUTFea64zzAFSrYCBaB/8bdVSDzLmBk2l79RyYaxa2PsHlQNwT+EVXgIU PU4BfTsPhnqGmhZfaFDgmqrVP3PbLXrHSHgsx X-Gm-Gg: ASbGncs5TFHRRg80D1wYCAaFQJUvAhxCtnGSNUx04bqb94PeFYFxDE0YlupkGetQXPW 3/i8spJtLInZuYkczzY94oUECLrq8JOHO9ved2wSxri8k7Fnpl/AxoginRaqC+eoFT7fzYllKkn Ym4cvnliLwFPD+GeTsDM+NH26jPug= X-Google-Smtp-Source: AGHT+IFugQYrzzq01cnB0H3uB4TAn9ggMI5m1y3I27HcSJoeANvbkb1a1E64d3BJlVIbIV4pYPyqFkt64dWkiTff9DQ= X-Received: by 2002:a05:690c:7349:b0:6fb:b524:48bc with SMTP id 00721157ae682-700bad5da5cmr295433767b3.35.1742990781308; Wed, 26 Mar 2025 05:06:21 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Khushboo Vashi Date: Wed, 26 Mar 2025 17:36:09 +0530 X-Gm-Features: AQ5f1Jppza5_T082Hs9ONIHK4KCfUt0YO1EZmXZYfILusrIs8WN4ZZ-08dcFGbU Message-ID: Subject: Re: PGAdmin Connectivity Issues To: Ami Chovatiya Cc: "pgadmin-support@lists.postgresql.org" Content-Type: multipart/alternative; boundary="0000000000005dfd3106313daa29" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --0000000000005dfd3106313daa29 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello, It looks like it has something to do with your Kerberos user login issue; it's not a pgAdmin issue. The error suggests an ExtraSids misconfiguration, which is part of the Kerberos validation info structure. Refer: https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-pac/69e86c= cc-85e3-41b9-b514-7d969cd0ed73 Thanks, Khushboo On Wed, Mar 26, 2025 at 5:07=E2=80=AFPM Ami Chovatiya wrote: > Hello Khushboo, > > Yes, we are using Kerberos for postgres connections. > > Thanks, > > *Ami Chovatiya* > > CoStar Group > > achovatiya@costar.com > ------------------------------ > *From:* Khushboo Vashi > *Sent:* Wednesday, March 26, 2025 6:00 AM > *To:* Ami Chovatiya > *Cc:* pgadmin-support@lists.postgresql.org < > pgadmin-support@lists.postgresql.org> > *Subject:* Re: PGAdmin Connectivity Issues > > EXTERNAL EMAIL > Hi, > > On Wed, Mar 26, 2025 at 3:05=E2=80=AFPM Ami Chovatiya > wrote: > > Hello, > > I hope this email finds you well! > > We have a few engineers using pgadmin for postgres access, and they are > running into the error below. > > *Connection failed: connection to server at "100.64.1.5", port 5432 > failed: FATAL: KERB_VALIDATION_INFO::UserFlags has USER_FLAGS_EXTRA_SIDS > set, but there are no ExtraSids.* > > Are you using Kerberos for Postgres connection? > > > Please note that this error is only getting thrown for two users at the > moment; everyone else can connect. From a system's perspective, all > permissions align for the users that have access. > > Would you be able to share what causes this error to get generated and > what the solution is? > > Thanks, > > *Ami Chovatiya* > > CoStar Group > > achovatiya@costar.com > > --0000000000005dfd3106313daa29 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello,

It looks like it has something to do wi= th your Kerberos user login issue; it's not a pgAdmin issue. The error = suggests an ExtraSids misconfiguration, which is part of the Kerberos valid= ation info structure.
Refer:=C2=A0https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-pac/6= 9e86ccc-85e3-41b9-b514-7d969cd0ed73

Thanks,
Khushboo
On Wed, Mar 26, 2025 at 5:07=E2=80=AFPM Ami Chovatiya &= lt;achovatiya@costar.com> w= rote:
Hello Khushboo,

Yes, we are using Kerberos for postgres connections.=C2=A0

Tha= nks,

= Ami Chovatiya

CoS= tar Group

achovatiya@costar.com

From:= Khushboo Vashi <khushboo.vashi@enterprisedb.com>
Sent: Wednesday, March 26, 2025 6:00 AM
To: Ami Chovatiya <achovatiya@costar.com>
Cc: pgadmin-support@lists.postgresql.org <pgadmin-support@lis= ts.postgresql.org>
Subject: Re: PGAdmin Connectivity Issues
=C2=A0
EXTERNAL EMAIL
Hi,

On Wed, Mar 26, 2025 at 3:05=E2=80=AFPM Ami Chovatiya <= achovatiya@costa= r.com> wrote:
Hello,

I hope this email=C2=A0finds you well!

We have a few engineers using pgadmin for postgres access, and they are run= ning into the error below.=C2=A0

Connection failed: connection to server at "100.64.1.5", port = 5432 failed: FATAL: KERB_VALIDATION_INFO::UserFlags has USER_FLAGS_EXTRA_SI= DS set, but there are no ExtraSids.

Are you using Kerberos for Postgres connection?
=C2=A0
Please note that this error is only getting thrown for two users at the mom= ent; everyone else can connect. From a system's perspective, all permis= sions align for the users that have access.

Would you be able to share what causes this error to get generated and what= the solution is?=C2=A0

Tha= nks,

= Ami Chovatiya

CoS= tar Group

achovatiya@costar.com

--0000000000005dfd3106313daa29--