From: Gémes Géza <geza@kzsdabas.hu>
To: pgsql-admin@postgresql.org
Subject: Re: Kerberized login to Postgres database
Date: Wed, 11 Jan 2012 20:43:25 +0100
Message-ID: <4F0DE65D.3080902@kzsdabas.hu> (raw)
In-Reply-To: <154917594.6139.1326264256073.JavaMail.root@collab.rosalab.ru>
References: <154917594.6139.1326264256073.JavaMail.root@collab.rosalab.ru>
2012-01-11 07:44 keltezéssel, Eugene Budanov írta:
> Hi!
>
>> I had a same problem already, but I recompiled Postgre with GSSAPI, it
>> does works correctly.
> Very interesting. Can you send me your config files?
>
> ---
> Best regards,
> Budanov Eugene
>
The relevant parts of my config is below:
postgresql.conf:
listen_addresses = '*'
krb_server_keyfile = '/etc/postgresql/postgres.keytab'
krb_caseins_users = on
pg_hba.conf:
host all all 0.0.0.0/0 gss
ktutil -k /etc/postgresql/postgres.keytab list gives:
Vno Type Principal
Aliases
1 aes256-cts-hmac-sha1-96 postgres/intranet.kzsdabas.hu@KZSDABAS.HU
1 des3-cbc-sha1 postgres/intranet.kzsdabas.hu@KZSDABAS.HU
1 arcfour-hmac-md5 postgres/intranet.kzsdabas.hu@KZSDABAS.HU
The service is running on a debian squeeze box, the rest of the settings
are unrelated.
Regards
Geza
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: geza@kzsdabas.hu
Subject: Re: Kerberized login to Postgres database
In-Reply-To: <4F0DE65D.3080902@kzsdabas.hu>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox