DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:mime-version:content-type
	:content-transfer-encoding:content-disposition;
	b=THnjJrWPgTHblyP6xUhu4UUdxR3aoSG2m5fnfbbrxQ7p7mcYH7T3TS1dmApuLEXZEn
	e2+U1Z7vwoODyU4Ae3xIDPVoUsTLScX3cBy17oJmqXCfARoJAPMfliEPIvlNX5vW+R0Y
	kneYLRWoZW7Etb2S9IdI1ymwVI+VU0LCKXmC4=
Message-ID: <4544e0330809101549k2ad82bd1td15a67838d37200@mail.gmail.com>
Date: Wed, 10 Sep 2008 17:49:47 -0500
From: "Peter Koczan" <pjkoczan@gmail.com>
To: "pgsql-admin@postgresql.org" <pgsql-admin@postgresql.org>
Subject: Postgres 8.3.3, GSSAPI, and Windows XP
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello,

I'm trying to offer a Windows XP client for Postgres 8.3.3 to my
users. I have it built and installed and everything is working except
for GSSAPI. I'm getting the following error:

C:\temp>S:\postgresql-8.3.3\bin\psql -h mitchell -p 5432 postgres
psql: SSPI continuation error: No credentials are available in the
security package
 (8009030e)

But authenticating against a server using krb5 authentication works
perfectly fine.
C:\temp>S:\postgresql-8.3.3\bin\psql -h vero -p 5432 postgres
Welcome to psql 8.3.3, the PostgreSQL interactive terminal.
...

Which is promising, but I'm really looking to go to GSSAPI since
native krb5 is deprecated.

I made sure that a copy of gssapi32.dll is in the same directory as
psql, and it's still giving me the same errors. Any ideas what is
going on or what I can do to fix it?

Gritty details:
PostgreSQL 8.3.3
Windows XP SP2 (32-bit)
Kerberos for Windows 3.2.2
Server is running on Red Hat Enterprise Linux 5.2, Kerberos 1.6.2

Thanks much,
Peter