Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1W33u2-0008DG-3d for pgsql-admin@arkaria.postgresql.org; Tue, 14 Jan 2014 13:19:34 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1W33u1-0002Mf-Ib for pgsql-admin@arkaria.postgresql.org; Tue, 14 Jan 2014 13:19:33 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1W33tz-0002Kg-Rg for pgsql-admin@postgresql.org; Tue, 14 Jan 2014 13:19:31 +0000 Received: from tamriel.snowman.net ([2001:4830:167b::11]) by magus.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1W33ts-0003gO-6R for pgsql-admin@postgresql.org; Tue, 14 Jan 2014 13:19:31 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id E86475F79D; Tue, 14 Jan 2014 08:19:36 -0500 (EST) Date: Tue, 14 Jan 2014 08:19:36 -0500 From: Stephen Frost To: jaime soler Cc: pgsql-admin@postgresql.org Subject: Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server Message-ID: <20140114131936.GU2686@tamriel.snowman.net> References: <1389702744.9086.55.camel@turing> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="sFDE4zCwgxz4NHeP" Content-Disposition: inline In-Reply-To: <1389702744.9086.55.camel@turing> X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.8.0-35-generic (x86_64) X-Uptime: 08:18:21 up 6 days, 10:32, 6 users, load average: 0.08, 0.05, 0.05 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -2.0 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org --sFDE4zCwgxz4NHeP Content-Type: text/plain; charset=us-ascii Content-Disposition: inline * jaime soler (jaime.soler@gmail.com) wrote: > psql: SSPI continuation error: The encryption type requested is not > supported by the KDC. (80090342) [...] > ktpass -out postgres.keytab -princ > postgres/hostname@domain -mapUser postgres -pass > XXX -crypto DES-CBC-MD5 Not 100% sure this is it, but it looks like you're using an ancient encryption algo which is no longer supported by MIT Kerberos (very intentionally...). Why aren't you using AES256 instead? Thanks, Stephen --sFDE4zCwgxz4NHeP Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJS1TloAAoJEO1sijiDR2RVlcIQAIXbtI6Msm0noIPrTrbZ5f+4 Hb2Z+bul+dyH4wZnloKQxlOWiJv+fiHgj4KQQv5VN5beQIq4mvUUFUxcV24+rvKC qXaCJuT1+fJljL3c8rXEoOUlSnZ/Rf0hBMINtYD0hvJF6tRrw7Pcx+yv5WTh6rsN mw9CCP1QUUJQVMvsCM2rY9XuJ0b9RHvwJW/jLpC8V4cE/Y//NfdaOF9B0oJSRy1s VFDtQjwQ2alSEDiw6BodIJaWhSJE6jLFnqjqQc3xWbopIc5Z9zlA5gQ0mqvYvQeS JuCDgk8OVNmeGpVGbGTDqYMHs4/E3McZWYu6ROhaK0mdBU1VpzqSK/ccvb4bzJC5 Bo3z6upjertWctQOT7nWrnyeJdHC4V83RrTHYpV+SZtzDR877gSdqOWWsI4cgHrM bZmJui4CVFTUpX4MsbxRfSmcKV2Ca5AbQdW2CX1jOut26QklENPe78Ji+rnfUcZu ZMSXbD6FwYsrcLR0Hrolrncxm1lAgAeZt9viFOTg0Zansb19jHRlN9p6zNw8dal9 X/PudPDso3MHskWoYVdtqRAW1ZuQasOcYWExeet7Tppr7kly287YFrGex9+Z9rjZ b/+DquEkmDtARAcYGCb6pYzl7Us6/SRYCdhcgDRXmgYR+SfPQRRwqn3NhKyiyJmC i5glLHwQs6dXaZ/DmIhz =uaXA -----END PGP SIGNATURE----- --sFDE4zCwgxz4NHeP--