From: Matt Warren <matt@tramat.com>
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_9A6E3983-60A8-47BB-BD4B-3093AEE883CF"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81\))
Subject: Password exec troubleshooting
Message-Id: <D335D0B3-2B00-444B-8D37-AFB6E9787460@tramat.com>
Date: Sat, 11 Oct 2025 17:04:57 -0400
To: pgadmin-support@lists.postgresql.org
Archived-At: 
 <https://www.postgresql.org/message-id/D335D0B3-2B00-444B-8D37-AFB6E9787460%40tramat.com>
Precedence: bulk


--Apple-Mail=_9A6E3983-60A8-47BB-BD4B-3093AEE883CF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hello pgadmin-support
Long-time user, first time emailing.

I=E2=80=99m trying to use the Password exec feature to fetch a secret =
from AWS Secrets Manager. I=E2=80=99ve created both a python script and =
then a sh script and neither work. Oddly nothing about password exec is =
reported in logs. I just get the error below.=20

pgAdmin 4 v 9.7 as desktop app
python 3.13.7
macOS 15.7.1

Things I=E2=80=99ve tried:

Executing either script from the command line works as expected and =
returns just the password string.
scripts have chmod +x for all users.
I=E2=80=99ve provided the full path to script in the Password exec entry
Tried quoting and escaping command line.
The shell script uses aws cli and full path is provided in script.
Moved the script to the ~/Library/Application Support/pgAdmin 4 in case =
macOS disk access issues were in play.

Error:

connection failed: connection to server at =E2=80=9C10.x.x.x", port 5432 =
failed: could not initiate GSSAPI security context: Unspecified GSS =
failure. Minor code may provide more information: Cannot find KDC for =
realm "KERBEROS.MICROSOFTONLINE.COM"
connection to server at =E2=80=9C10.x.x.x", port 5432 failed: =
fe_sendauth: no password supplied

=46rom what I can parse of source code, I don=E2=80=99t think the =
ENABLE_SERVER_PASS_EXEC_CMD comes into play as I=E2=80=99m not operating =
in server mode.

Does anyone have examples of a config that works?
Any advice on how I can debug further?=20

Thanks for any pointers!

--Apple-Mail=_9A6E3983-60A8-47BB-BD4B-3093AEE883CF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"overflow-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;">Hello =
pgadmin-support<div>Long-time user, first time =
emailing.</div><div><br></div><div>I=E2=80=99m trying to use the =
Password exec feature to fetch a secret from AWS Secrets Manager. I=E2=80=99=
ve created both a python script and then a sh script and neither work. =
Oddly <i>nothing</i>&nbsp;about password exec is reported in logs. I =
just get the error below.&nbsp;</div><div><br></div><div>pgAdmin 4 v 9.7 =
as desktop app</div><div>python 3.13.7</div><div>macOS =
15.7.1</div><div><br></div><div>Things I=E2=80=99ve =
tried:</div><div><br></div><div><ul class=3D"MailOutline"><li>Executing =
either script from the command line works as expected and returns just =
the password string.</li><li>scripts have chmod +x for all =
users.</li><li>I=E2=80=99ve provided the full path to script in the =
Password exec entry</li><li>Tried quoting and escaping command =
line.</li><li>The shell script uses aws cli and full path is provided in =
script.</li><li>Moved the script to the ~/Library/Application =
Support/pgAdmin 4 in case macOS disk access issues were in =
play.</li></ul></div><div><br></div><div>Error:</div><div><div><br></div><=
div><font face=3D"Monaco"><span style=3D"font-size: 12px;">connection =
failed: connection to server at =E2=80=9C10.x.x.x", port 5432 failed: =
could not initiate GSSAPI security context: Unspecified GSS failure. =
Minor code may provide more information: Cannot find KDC for realm =
"KERBEROS.MICROSOFTONLINE.COM"</span></font></div><div><font =
face=3D"Monaco"><span style=3D"font-size: 12px;">connection to server at =
=E2=80=9C10.x.x.x", port 5432 failed: fe_sendauth: no password =
supplied</span></font></div></div><div><font face=3D"Monaco"><span =
style=3D"font-size: 12px;"><br></span></font></div><div><div>=46rom what =
I can parse of source code, I don=E2=80=99t think the =
ENABLE_SERVER_PASS_EXEC_CMD comes into play as I=E2=80=99m not operating =
in server mode.</div><div><br></div><div>Does anyone have examples of a =
config that works?</div><div>Any advice on how I can debug =
further?&nbsp;</div><div><br></div><div>Thanks for any =
pointers!</div><div></div></div></body></html>=

--Apple-Mail=_9A6E3983-60A8-47BB-BD4B-3093AEE883CF--