public inbox for [email protected]
help / color / mirror / Atom feedFrom: Matt Warren <[email protected]>
To: [email protected]
Subject: Password exec troubleshooting
Date: Sat, 11 Oct 2025 17:04:57 -0400
Message-ID: <[email protected]> (raw)
Hello pgadmin-support
Long-time user, first time emailing.
I’m trying to use the Password exec feature to fetch a secret from AWS Secrets Manager. I’ve created both a python script and then a sh script and neither work. Oddly nothing about password exec is reported in logs. I just get the error below.
pgAdmin 4 v 9.7 as desktop app
python 3.13.7
macOS 15.7.1
Things I’ve tried:
Executing either script from the command line works as expected and returns just the password string.
scripts have chmod +x for all users.
I’ve provided the full path to script in the Password exec entry
Tried quoting and escaping command line.
The shell script uses aws cli and full path is provided in script.
Moved the script to the ~/Library/Application Support/pgAdmin 4 in case macOS disk access issues were in play.
Error:
connection failed: connection to server at “10.x.x.x", port 5432 failed: could not initiate GSSAPI security context: Unspecified GSS failure. Minor code may provide more information: Cannot find KDC for realm "KERBEROS.MICROSOFTONLINE.COM"
connection to server at “10.x.x.x", port 5432 failed: fe_sendauth: no password supplied
From what I can parse of source code, I don’t think the ENABLE_SERVER_PASS_EXEC_CMD comes into play as I’m not operating in server mode.
Does anyone have examples of a config that works?
Any advice on how I can debug further?
Thanks for any pointers!
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: Password exec troubleshooting
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox