Received: from magus.postgresql.org (magus.postgresql.org [87.238.57.229]) by mail.postgresql.org (Postfix) with ESMTP id A766C450671 for ; Wed, 11 Jan 2012 15:44:01 -0400 (AST) Received: from mail.kzsdabas.hu ([2001:470:d606:1::3]) by magus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1Rl45W-00020z-CI for pgsql-admin@postgresql.org; Wed, 11 Jan 2012 19:44:00 +0000 Received: from [2001:470:d606:1:250:bfff:fe9a:794d] by mail-1.kzsdabas.hu with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.72) (envelope-from ) id 1Rl441-0003G8-FK for pgsql-admin@postgresql.org; Wed, 11 Jan 2012 20:42:36 +0100 Message-ID: <4F0DE65D.3080902@kzsdabas.hu> Date: Wed, 11 Jan 2012 20:43:25 +0100 From: =?UTF-8?B?R8OpbWVzIEfDqXph?= User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.24) Gecko/20111108 Thunderbird/3.1.16 MIME-Version: 1.0 To: pgsql-admin@postgresql.org References: <154917594.6139.1326264256073.JavaMail.root@collab.rosalab.ru> In-Reply-To: <154917594.6139.1326264256073.JavaMail.root@collab.rosalab.ru> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-SA-Exim-Connect-IP: 2001:470:d606:1:250:bfff:fe9a:794d X-SA-Exim-Mail-From: geza@kzsdabas.hu X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mail-1.kzsdabas.hu X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.1 Subject: Re: Kerberized login to Postgres database X-SA-Exim-Version: 4.2.1 (built Mon, 22 Mar 2010 06:26:47 +0000) X-SA-Exim-Scanned: Yes (on mail-1.kzsdabas.hu) X-Pg-Spam-Score: -1.9 (-) X-Archive-Number: 201201/48 X-Sequence-Number: 38960 2012-01-11 07:44 keltezéssel, Eugene Budanov írta: > Hi! > >> I had a same problem already, but I recompiled Postgre with GSSAPI, it >> does works correctly. > Very interesting. Can you send me your config files? > > --- > Best regards, > Budanov Eugene > The relevant parts of my config is below: postgresql.conf: listen_addresses = '*' krb_server_keyfile = '/etc/postgresql/postgres.keytab' krb_caseins_users = on pg_hba.conf: host all all 0.0.0.0/0 gss ktutil -k /etc/postgresql/postgres.keytab list gives: Vno Type Principal Aliases 1 aes256-cts-hmac-sha1-96 postgres/intranet.kzsdabas.hu@KZSDABAS.HU 1 des3-cbc-sha1 postgres/intranet.kzsdabas.hu@KZSDABAS.HU 1 arcfour-hmac-md5 postgres/intranet.kzsdabas.hu@KZSDABAS.HU The service is running on a debian squeeze box, the rest of the settings are unrelated. Regards Geza