Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 5898164FD1A for ; Wed, 10 Sep 2008 20:50:55 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 44935-01 for ; Wed, 10 Sep 2008 20:50:51 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from tamriel.snowman.net (tamriel.snowman.net [72.66.115.51]) by postgresql.org (Postfix) with ESMTP id 56F7164FCEF for ; Wed, 10 Sep 2008 20:50:48 -0300 (ADT) Received: by tamriel.snowman.net (Postfix, from userid 1000) id CBB708406D; Wed, 10 Sep 2008 19:50:45 -0400 (EDT) Date: Wed, 10 Sep 2008 19:50:45 -0400 From: Stephen Frost To: Peter Koczan Cc: "pgsql-admin@postgresql.org" Subject: Re: Postgres 8.3.3, GSSAPI, and Windows XP Message-ID: <20080910235045.GW16005@tamriel.snowman.net> Mail-Followup-To: Peter Koczan , "pgsql-admin@postgresql.org" References: <4544e0330809101549k2ad82bd1td15a67838d37200@mail.gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="l+LxDeyHMCBjwres" Content-Disposition: inline In-Reply-To: <4544e0330809101549k2ad82bd1td15a67838d37200@mail.gmail.com> X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/2.6.25-2-amd64 (x86_64) X-Uptime: 19:47:23 up 58 days, 23:01, 25 users, load average: 0.10, 0.05, 0.01 User-Agent: Mutt/1.5.18 (2008-05-17) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200809/84 X-Sequence-Number: 30177 --l+LxDeyHMCBjwres Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Peter, * Peter Koczan (pjkoczan@gmail.com) wrote: > Gritty details: > PostgreSQL 8.3.3 > Windows XP SP2 (32-bit) > Kerberos for Windows 3.2.2 > Server is running on Red Hat Enterprise Linux 5.2, Kerberos 1.6.2 When using GSSAPI and KfW, you need to set a couple of environment variables for libpq to pick up on which indicate it should use GSSAPI rather than SSPI (standard Windows Kerberos/AD stuff): PGGSSLIB = gssapi and you'll probably also want: PGKRBSRVNAME = postgres Just set those through your computer settings, probably system wide on the systems in question. Since it defaults to upper-case POSTGRES on Windows, but if you're running KfW, I'm guessing you're using just regular MIT/Kerberos and using 'postgres/hostname.domain@REALM'. Enjoy! Stephen --l+LxDeyHMCBjwres Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkjIXVUACgkQrzgMPqB3kig7vgCghbWzcXGtlM4Pg2OgiXoOOrju MwEAn2z1BJvN1M/dfl5NqG9orlNuwbBd =t09A -----END PGP SIGNATURE----- --l+LxDeyHMCBjwres--