public inbox for [email protected]
help / color / mirror / Atom feedgssenc supported?
6+ messages / 3 participants
[nested] [flat]
* gssenc supported?
@ 2025-01-19 11:34 Troels Arvin <[email protected]>
2025-01-20 04:55 ` Re: gssenc supported? Khushboo Vashi <[email protected]>
0 siblings, 1 reply; 6+ messages in thread
From: Troels Arvin @ 2025-01-19 11:34 UTC (permalink / raw)
To: [email protected]
Hello,
I've just installed the latest pgAdmin for Windows on a Windows 11 PC.
I'm trying to set up a connection to a Kerberos-enabled Postgres server
where hostgssenc is the only connection type allowed. So in the
connection definition in pgAdmin, I've set "gssencmode" to "require".
When I then try to connect to the database server, I get the following
error:
connection is bad: gssencmode value "require" invalid when GSSAPI
support is not compiled in
So is there a way to have pgAdmin connect with gssenc
(Kerberos-encrypted communication) enabled?
--
Regards,
Troels Arvin
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported?
2025-01-19 11:34 gssenc supported? Troels Arvin <[email protected]>
@ 2025-01-20 04:55 ` Khushboo Vashi <[email protected]>
2025-01-21 16:51 ` Re: gssenc supported? Troels Arvin <[email protected]>
0 siblings, 1 reply; 6+ messages in thread
From: Khushboo Vashi @ 2025-01-20 04:55 UTC (permalink / raw)
To: Troels Arvin <[email protected]>; +Cc: [email protected]
Hi,
On Sun, Jan 19, 2025 at 5:04 PM Troels Arvin <[email protected]> wrote:
> Hello,
>
> I've just installed the latest pgAdmin for Windows on a Windows 11 PC.
> I'm trying to set up a connection to a Kerberos-enabled Postgres server
> where hostgssenc is the only connection type allowed. So in the
> connection definition in pgAdmin, I've set "gssencmode" to "require".
> When I then try to connect to the database server, I get the following
> error:
>
> connection is bad: gssencmode value "require" invalid when GSSAPI
> support is not compiled in
>
> So is there a way to have pgAdmin connect with gssenc
> (Kerberos-encrypted communication) enabled?
>
> Have you tried connecting Postgres Server with PSQL?
The error, *GSSAPI supports is not compiled* raised by PostgreSQL, not by
pgAdmin.
--
> Regards,
> Troels Arvin
>
>
>
>
>
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported?
2025-01-19 11:34 gssenc supported? Troels Arvin <[email protected]>
2025-01-20 04:55 ` Re: gssenc supported? Khushboo Vashi <[email protected]>
@ 2025-01-21 16:51 ` Troels Arvin <[email protected]>
2025-01-22 05:56 ` Re: gssenc supported? Khushboo Vashi <[email protected]>
2025-01-22 09:22 ` Re: gssenc supported? Dave Page <[email protected]>
0 siblings, 2 replies; 6+ messages in thread
From: Troels Arvin @ 2025-01-21 16:51 UTC (permalink / raw)
To: [email protected]
Hello,
Khushboo Vashi wrote:
> Have you tried connecting Postgres Server with PSQL?
Yes, I've tried the psql.exe which is shippe with pgadmin. And I've
tried psql.exe from the latest Windows installer from
https://www.enterprisedb.com/downloads/postgres-postgresql-downloads
Both work when having hostnogssenc in pg_hba.conf. But both do not work
when hostgssenc is used in pg_hba.conf.
Does someone know why those binaries are not compiled with support for
hostgssenc?
--
Regards,
Troels Arvin
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported?
2025-01-19 11:34 gssenc supported? Troels Arvin <[email protected]>
2025-01-20 04:55 ` Re: gssenc supported? Khushboo Vashi <[email protected]>
2025-01-21 16:51 ` Re: gssenc supported? Troels Arvin <[email protected]>
@ 2025-01-22 05:56 ` Khushboo Vashi <[email protected]>
2025-01-22 07:30 ` Re: gssenc supported? Troels Arvin <[email protected]>
1 sibling, 1 reply; 6+ messages in thread
From: Khushboo Vashi @ 2025-01-22 05:56 UTC (permalink / raw)
To: Troels Arvin <[email protected]>; +Cc: [email protected]
On Tue, Jan 21, 2025 at 10:21 PM Troels Arvin <[email protected]> wrote:
> Hello,
>
> Khushboo Vashi wrote:
> > Have you tried connecting Postgres Server with PSQL?
>
> Yes, I've tried the psql.exe which is shippe with pgadmin. And I've
> tried psql.exe from the latest Windows installer from
> https://www.enterprisedb.com/downloads/postgres-postgresql-downloads
>
> Both work when having hostnogssenc in pg_hba.conf. But both do not work
> when hostgssenc is used in pg_hba.conf.
>
> Does someone know why those binaries are not compiled with support for
> hostgssenc?
>
> Refer, https://www.postgresql.org/docs/current/auth-pg-hba-conf.html
It looks like your PostgreSQL server wasn't built with GSSAPI support.
--
> Regards,
> Troels Arvin
>
>
>
>
>
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported?
2025-01-19 11:34 gssenc supported? Troels Arvin <[email protected]>
2025-01-20 04:55 ` Re: gssenc supported? Khushboo Vashi <[email protected]>
2025-01-21 16:51 ` Re: gssenc supported? Troels Arvin <[email protected]>
2025-01-22 05:56 ` Re: gssenc supported? Khushboo Vashi <[email protected]>
@ 2025-01-22 07:30 ` Troels Arvin <[email protected]>
0 siblings, 0 replies; 6+ messages in thread
From: Troels Arvin @ 2025-01-22 07:30 UTC (permalink / raw)
To: [email protected]
Hello,
Khushboo Vashi wrote:
> It looks like your PostgreSQL server wasn't built with GSSAPI support.
Oh, but it is:
In output from the server's pg_config, it mentions --with-gssapi. And
when I connect to the server from a Ubuntu or Fedora psql, my connection
status indeed mentions GSS:
============================
aduser@dbclient:~$ psql -h dbserver.demo.troels.arvin.dk
psql (16.6 (Ubuntu 16.6-0ubuntu0.24.10.1))
GSSAPI-encrypted connection
Type "help" for help.
aduser=#
============================
--
Regards,
Troels Arvin
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: gssenc supported?
2025-01-19 11:34 gssenc supported? Troels Arvin <[email protected]>
2025-01-20 04:55 ` Re: gssenc supported? Khushboo Vashi <[email protected]>
2025-01-21 16:51 ` Re: gssenc supported? Troels Arvin <[email protected]>
@ 2025-01-22 09:22 ` Dave Page <[email protected]>
1 sibling, 0 replies; 6+ messages in thread
From: Dave Page @ 2025-01-22 09:22 UTC (permalink / raw)
To: Troels Arvin <[email protected]>; +Cc: [email protected]
Hi
On Tue, 21 Jan 2025 at 16:51, Troels Arvin <[email protected]> wrote:
> Hello,
>
> Khushboo Vashi wrote:
> > Have you tried connecting Postgres Server with PSQL?
>
> Yes, I've tried the psql.exe which is shippe with pgadmin. And I've
> tried psql.exe from the latest Windows installer from
> https://www.enterprisedb.com/downloads/postgres-postgresql-downloads
>
> Both work when having hostnogssenc in pg_hba.conf. But both do not work
> when hostgssenc is used in pg_hba.conf.
>
> Does someone know why those binaries are not compiled with support for
> hostgssenc?
>
We don't build the binaries that we ship with pgAdmin on Windows with
GSSAPI support, for a couple of reasons. First, there's actually a
long-standing bug [1] in PostgreSQL that prevents compilation on Windows
with both MIT Kerberos and OpenSSL together (I've tried multiple
backchannels to get that fix committed - please feel free to chime in on
the thread). Secondly, people almost exclusively use SSPI on Windows. You
are actually the first person I recall ever wanting GSSAPI support.
FWIW, we ship MIT Kerberos anyway (for handling app logins). Adding GSSAPI
support would be trivial, if the upstream bug were fixed.
[1]
https://www.postgresql.org/message-id/flat/CA%2BOCxoxwsgi8QdzN8A0OPGuGfu_1vEW3ufVBnbwd3gfawVpsXw%40m...
--
Dave Page
pgAdmin: https://www.pgadmin.org
PostgreSQL: https://www.postgresql.org
pgEdge: https://www.pgedge.com
^ permalink raw reply [nested|flat] 6+ messages in thread
end of thread, other threads:[~2025-01-22 09:22 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2025-01-19 11:34 gssenc supported? Troels Arvin <[email protected]>
2025-01-20 04:55 ` Khushboo Vashi <[email protected]>
2025-01-21 16:51 ` Troels Arvin <[email protected]>
2025-01-22 05:56 ` Khushboo Vashi <[email protected]>
2025-01-22 07:30 ` Troels Arvin <[email protected]>
2025-01-22 09:22 ` Dave Page <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox