Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1v8Act-00DshH-Ry for pgadmin-support@arkaria.postgresql.org; Mon, 13 Oct 2025 04:57:40 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1v8Acr-004BED-IE for pgadmin-support@arkaria.postgresql.org; Mon, 13 Oct 2025 04:57:38 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1v8Acr-004BE4-6G for pgadmin-support@lists.postgresql.org; Mon, 13 Oct 2025 04:57:38 +0000 Received: from mail-vs1-xe33.google.com ([2607:f8b0:4864:20::e33]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1v8Acp-001SrA-0y for pgadmin-support@lists.postgresql.org; Mon, 13 Oct 2025 04:57:36 +0000 Received: by mail-vs1-xe33.google.com with SMTP id ada2fe7eead31-5d5fbfca7e2so2599600137.0 for ; Sun, 12 Oct 2025 21:57:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb.com; s=google; t=1760331453; x=1760936253; darn=lists.postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=lWHB4AEDlScG+WYQdu8HDol5ObvWWsNO2Gf519uTzzs=; b=fPatmEj7snYexDhN1d4/QFa1Eaj4rC/kvgoUdOuDEYBbOAt8rp0hSWpcn5tMQO4Hv5 cWagmH5CRu8I980fUfgIDFS6053Bvh910uqxUbhTlVN/tygUC5tGC6FptCmzSu7BQfDl 3KiwWUvijJjRaTliWT9PaNOEEh7gso32v24s2NpL6JhAJi7c1xovJXYPQ8HpflySzwDY ZSMEFytSiDTC5Zz8HmvB+MnkPE/ymTuF0NwsccVpQfvySaEusXbXCMbd9otsJCqNM/Q6 IjsxRHpwVPls1mJtmmWQCZNbs87s1QPoRm9ONx8JZXSz/pMAZAEcWCNzJraMT4NoHgCh V33A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760331453; x=1760936253; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=lWHB4AEDlScG+WYQdu8HDol5ObvWWsNO2Gf519uTzzs=; b=mnTTqwfGOCxoYyEznF+X4a6GIujE+q6U5AQ0oJqVHWL0fX27UhDOC9I8PyAQTE6CTt YB2eot7/SBCx+jFvMvO88+sy4Xx7PXvGGS6wsGg+zAJDtYwAit2uYrbKkBHEAUOafZ9i 3xZapEiFcgla0YUtGrBYanq74soYqzm8oN1HO4sRV1rHFB3mkur2eZPFsoPh6Cjduhsl 9ym7xHvbgyoiAIANRGBUC7tJUo6IIlWxA8S0wAdAJXstTPL9z8Cyja9CAPkVZfi5kQpQ DOhem/7nS4T+UJmtlFMwE9u8eIPHiKYZFLeqQ71i3jeWKJwQuyhuchHyHtY75VBp+skR Eq+g== X-Gm-Message-State: AOJu0YwKKpKfN/xTKktktyos+BxyhLVLghFSE8xffddmutJ2gPuFGVT3 SwWHYJn3BiNb9OG9QA/hG+rRjoSNC4tYEwtRufJcbavBNWCDL+Jq0Tyf25XtUQmN5AH03n/tpll DY5P7Ssw9FYEGzNisZfGGdS4eLZd4lircJsKV/WFb X-Gm-Gg: ASbGncu8f+cCnkP+TjpQX0cn1J8q9k/qK4SU+Y/4SXQUcODmVuZOVYyaSK5j0bjymRj 08p67ScfZ9CSVIpoaNdoFLLJmBVGHolUZCMNOyHMyBGRlivm7G7BFb5wk1/bC77FBRB8KwPC8/i KQjtGt0+Kjg7HLKz/yOh2hjYElGsrnJsZhwMBmxaNazd1wKwDlX/es6hdOOAqw9cP0+iBXTghB4 p8pUgb8c1Q2dEleoifxVVOE5SAdP02AJznmmQHayFjthZ8O1Pirxp1o2irv X-Google-Smtp-Source: AGHT+IH3ZnBxRKR2ZaLeYUz43W7TaVoK6qlv4wrFtnP7YXjWDEXZrtXPjLv/wkcykM28PW+xQqRgCJGsIkqdgXXik1M= X-Received: by 2002:a05:6102:3a0e:b0:51c:4443:16c7 with SMTP id ada2fe7eead31-5d5e2591dc5mr8937516137.6.1760331453304; Sun, 12 Oct 2025 21:57:33 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Aditya Toshniwal Date: Mon, 13 Oct 2025 10:26:56 +0530 X-Gm-Features: AS18NWAquImnW7J_9KoeAp07NaU7h4YDE5U8JvX8q3W4ACCk-aq5qFvnWkkX3V4 Message-ID: Subject: Re: Password exec troubleshooting To: Matt Warren Cc: pgadmin-support@lists.postgresql.org Content-Type: multipart/alternative; boundary="000000000000f6274a0641031aeb" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --000000000000f6274a0641031aeb Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Matt, Can you share the script to simulate the issue? We may also need to improve password exec command logging. On Sun, Oct 12, 2025 at 2:35=E2=80=AFAM Matt Warren wrote= : > Hello pgadmin-support > Long-time user, first time emailing. > > I=E2=80=99m trying to use the Password exec feature to fetch a secret fro= m AWS > Secrets Manager. I=E2=80=99ve created both a python script and then a sh = script and > neither work. Oddly *nothing* about password exec is reported in logs. I > just get the error below. > > pgAdmin 4 v 9.7 as desktop app > python 3.13.7 > macOS 15.7.1 > > Things I=E2=80=99ve tried: > > > - Executing either script from the command line works as expected and > returns just the password string. > - scripts have chmod +x for all users. > - I=E2=80=99ve provided the full path to script in the Password exec e= ntry > - Tried quoting and escaping command line. > - The shell script uses aws cli and full path is provided in script. > - Moved the script to the ~/Library/Application Support/pgAdmin 4 in > case macOS disk access issues were in play. > > > Error: > > connection failed: connection to server at =E2=80=9C10.x.x.x", port 5432 = failed: > could not initiate GSSAPI security context: Unspecified GSS failure. Mino= r > code may provide more information: Cannot find KDC for realm " > KERBEROS.MICROSOFTONLINE.COM" > connection to server at =E2=80=9C10.x.x.x", port 5432 failed: fe_sendauth= : no > password supplied > > From what I can parse of source code, I don=E2=80=99t think the > ENABLE_SERVER_PASS_EXEC_CMD comes into play as I=E2=80=99m not operating = in server > mode. > > Does anyone have examples of a config that works? > Any advice on how I can debug further? > > Thanks for any pointers! > --=20 Thanks, Aditya Toshniwal pgAdmin Hacker | Sr. Staff SDE II | *enterprisedb.com* "Don't Complain about Heat, Plant a TREE" --000000000000f6274a0641031aeb Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi=C2=A0Matt,

Can you share the script to simulate the iss= ue? We may also need to improve password exec command logging.
<= br>
On Sun, Oct 12, 2025 at 2:35=E2=80=AFAM Matt Warren <matt@tramat.com> wrote:
Hello pgadmin-supportLong-time user, first time emailing.

I=E2=80=99= m trying to use the Password exec feature to fetch a secret from AWS Secret= s Manager. I=E2=80=99ve created both a python script and then a sh script a= nd neither work. Oddly nothing=C2=A0about password exec is reported = in logs. I just get the error below.=C2=A0

pgAdmin= 4 v 9.7 as desktop app
python 3.13.7
macOS 15.7.1

Things I=E2=80=99ve tried:

  • Executing either script from the command line works as expected and r= eturns just the password string.
  • scripts have chmod +x for all user= s.
  • I=E2=80=99ve provided the full path to script in the Password ex= ec entry
  • Tried quoting and escaping command line.
  • The shell= script uses aws cli and full path is provided in script.
  • Moved the= script to the ~/Library/Application Support/pgAdmin 4 in case macOS disk a= ccess issues were in play.

    • Error:
    <= div>

    connection failed: connection to server at =E2=80=9C10.x.x.x", port = 5432 failed: could not initiate GSSAPI security context: Unspecified GSS fa= ilure. Minor code may provide more information: Cannot find KDC for realm &= quot;KERB= EROS.MICROSOFTONLINE.COM"
    connection to server at =E2=80=9C10.x.= x.x", port 5432 failed: fe_sendauth: no password supplied

    =
    From what I can parse of source code, I don= =E2=80=99t think the ENABLE_SERVER_PASS_EXEC_CMD comes into play as I=E2=80= =99m not operating in server mode.

    Does anyone hav= e examples of a config that works?
    Any advice on how I can debug = further?=C2=A0

    Thanks for any pointers!
    =


    =
    --
    Thanks,
    Aditya Toshniwal
    pgAdmin Hacker=C2=A0| Sr. Staff = SDE II=C2=A0| enterprisedb.com
    "Don't Complain about Heat, Plant a TREE&q= uot;
    --000000000000f6274a0641031aeb--