Received: from makus.postgresql.org (makus.postgresql.org [98.129.198.125]) by mail.postgresql.org (Postfix) with ESMTP id 690981E82765 for ; Wed, 11 Jan 2012 02:37:36 -0400 (AST) Received: from [217.199.216.178] (helo=collab.rosalab.ru) by makus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1RkroV-0004Q2-Bd for pgsql-admin@postgresql.org; Wed, 11 Jan 2012 06:37:36 +0000 Received: from localhost (localhost.localdomain [127.0.0.1]) by collab.rosalab.ru (Postfix) with ESMTP id 25D1229C45C for ; Wed, 11 Jan 2012 10:37:20 +0400 (MSK) X-Virus-Scanned: amavisd-new at rosalab.ru Received: from collab.rosalab.ru ([127.0.0.1]) by localhost (collab.rosalab.ru [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4KkOZ-UZxXiG for ; Wed, 11 Jan 2012 10:37:19 +0400 (MSK) Received: from collab.rosalab.ru (collab.rosalab.ru [192.168.1.89]) by collab.rosalab.ru (Postfix) with ESMTP id C3A5929C45A for ; Wed, 11 Jan 2012 10:37:19 +0400 (MSK) Date: Wed, 11 Jan 2012 09:37:19 +0300 (MSK) From: Eugene Budanov To: pgsql-admin@postgresql.org Message-ID: <175176729.6137.1326263839628.JavaMail.root@collab.rosalab.ru> In-Reply-To: <4F0C7713.2020200@kzsdabas.hu> Subject: Re: Kerberized login to Postgres database MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Mailer: Zimbra 6.0.10_GA_2692 (ZimbraWebClient - FF3.0 (Linux)/6.0.10_GA_2692) X-Host-Lookup-Failed: Reverse DNS lookup failed for 217.199.216.178 (failed) X-Pg-Spam-Score: 1.6 (+) X-Archive-Number: 201201/46 X-Sequence-Number: 38958 Hi! >You should try to connect by fqdn instead of ip address: psql -h FQDN -U USER. I tried it. I got same error. DNS lookup work fine. >BTW you don't need the host principal in the >/var/lib/pgsql/data/krb5.keytab keytab used only by postgres. It's strange. Official postgres documentation says opposite. Most of docs about kerberizing Postgres says about needing host principal in keytab file. --- Best regards, Budanov Eugene