pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: jaime soler <jaime.soler@gmail.com>
To: Stephen Frost <sfrost@snowman.net>
Cc: pgsql-admin@postgresql.org
Subject: Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server
Date: Tue, 14 Jan 2014 15:18:45 +0100
Message-ID: <1389709125.9086.61.camel@turing> (raw)
In-Reply-To: <20140114131936.GU2686@tamriel.snowman.net>
References: <1389702744.9086.55.camel@turing>
	<20140114131936.GU2686@tamriel.snowman.net>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>

El mar, 14-01-2014 a las 08:19 -0500, Stephen Frost escribió:
> * jaime soler (jaime.soler@gmail.com) wrote:
> > psql: SSPI continuation error: The encryption type requested is not
> > supported by the KDC. (80090342)
> 
> [...]
> 
> > ktpass -out postgres.keytab -princ
> > postgres/hostname@domain -mapUser postgres -pass
> > XXX -crypto DES-CBC-MD5
> 
> Not 100% sure this is it, but it looks like you're using an ancient
> encryption algo which is no longer supported by MIT Kerberos (very
> intentionally...).  Why aren't you using AES256 instead?

So, should I use ALL as argument to -crypto option as it follows  ?

 ktpass -out postgres.keytab -princ
 postgres/hostname@domain -mapUser postgres -pass
 XXX -crypto ALL


Thanks,
Jaime 

> 
> 	Thanks,
> 
> 		Stephen




-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin



view thread (4+ messages)  latest in thread

Message-ID: <1389709125.9086.61.camel@turing>
Permalink:  ../1389709125.9086.61.camel@turing/
Also on:    postgresql.org/message-id/1389709125.9086.61.camel@turing

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: jaime.soler@gmail.com, sfrost@snowman.net
  Subject: Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server
  In-Reply-To: <1389709125.9086.61.camel@turing>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox