From: Stephen Frost <sfrost@snowman.net>
To: jaime soler <jaime.soler@gmail.com>
Cc: pgsql-admin@postgresql.org
Subject: Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server
Date: Tue, 14 Jan 2014 08:19:36 -0500
Message-ID: <20140114131936.GU2686@tamriel.snowman.net> (raw)
In-Reply-To: <1389702744.9086.55.camel@turing>
References: <1389702744.9086.55.camel@turing>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
* jaime soler (jaime.soler@gmail.com) wrote:
> psql: SSPI continuation error: The encryption type requested is not
> supported by the KDC. (80090342)
[...]
> ktpass -out postgres.keytab -princ
> postgres/hostname@domain -mapUser postgres -pass
> XXX -crypto DES-CBC-MD5
Not 100% sure this is it, but it looks like you're using an ancient
encryption algo which is no longer supported by MIT Kerberos (very
intentionally...). Why aren't you using AES256 instead?
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 835B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: sfrost@snowman.net, jaime.soler@gmail.com
Subject: Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server
In-Reply-To: <20140114131936.GU2686@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox