Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1W34qy-00021T-2E for pgsql-admin@arkaria.postgresql.org; Tue, 14 Jan 2014 14:20:28 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1W34qx-0007kq-As for pgsql-admin@arkaria.postgresql.org; Tue, 14 Jan 2014 14:20:27 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1W34qu-0007hz-Vb for pgsql-admin@postgresql.org; Tue, 14 Jan 2014 14:20:25 +0000 Received: from tamriel.snowman.net ([2001:4830:167b::11]) by magus.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1W34qo-0004qV-Vp for pgsql-admin@postgresql.org; Tue, 14 Jan 2014 14:20:24 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id 59B815F7A6; Tue, 14 Jan 2014 09:20:32 -0500 (EST) Date: Tue, 14 Jan 2014 09:20:32 -0500 From: Stephen Frost To: jaime soler Cc: pgsql-admin@postgresql.org Subject: Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server Message-ID: <20140114142032.GW2686@tamriel.snowman.net> References: <1389702744.9086.55.camel@turing> <20140114131936.GU2686@tamriel.snowman.net> <1389709125.9086.61.camel@turing> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="4cc5A3vHqXJ2PrmM" Content-Disposition: inline In-Reply-To: <1389709125.9086.61.camel@turing> X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.8.0-35-generic (x86_64) X-Uptime: 09:19:26 up 6 days, 11:33, 7 users, load average: 0.06, 0.06, 0.06 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -2.0 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org --4cc5A3vHqXJ2PrmM Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * jaime soler (jaime.soler@gmail.com) wrote: > So, should I use ALL as argument to -crypto option as it follows ? >=20 > ktpass -out postgres.keytab -princ > postgres/hostname@domain -mapUser postgres -pass > XXX -crypto ALL You could, or you could use AES256-SHA1 ... Thanks, Stephen --4cc5A3vHqXJ2PrmM Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJS1UevAAoJEO1sijiDR2RVtaoP/0lPXZvXXDkAnNOwr0ssRjtv 0TdzCfw9E+ysB6Y688M3DG6IxmL6WskqAjFRhnDNcTcK+EWoE+jBIYBzm5LNT2kN po+xBLMHz5KtkuSoc0QR2kRm5HxVSCXcXibmVGOtghg83pt+UtFf4vEz9kKQh/GP wBZBmEDTT691ak9YYvtdhCrgezauUBotdDDpOebER1Hh++1zfDRwRp1b5vWewG7r Bx7kJGaOz9GN17aFkmtihG4tHfw2+m+eiR9Dn9nRkKXuypwYSJcIk4GegofvNX02 jn5gp43QWbkOHWkepVhhPNZUV2DzvMKeRfyozuwTOnzAeox1oow1vYHyrZq6WaQ8 FR17ZvFNZcjP8DiqNUwJpPH0wY0ABWIe9r04b6a5mpQaLZKPynatuUnQKRl+AS4X W2QxA9RqYjBYEv0mVN1fO/4i3IxnhoAFzj2hiM1v+T4n8dCqdVNkw/GJ4lYhkCzH W9LXBY0Yyjyw67Ccke+/dI+XGTVLWsHPei4beg0TDNSLNDt/CHPgp559vbspfAjE buzYI53XBTGceMD9BOU3vsJfYpizoXRtqykOf5XkgDcfDe25c4IHb54Eu6rmORq+ OpABQLJOJAO3QkSI5/jHC3PeTG/L7/bYrSeaUyoZbCmeFUTqTyRVoV8ck5RkCQpH 1b0D6+tLdprxiOW6jGzI =xKsS -----END PGP SIGNATURE----- --4cc5A3vHqXJ2PrmM--