From: Yandong.Yao@emc.com
To: raghuchennuru@gmail.com
To: willybas@gmail.com
Cc: pgsql-admin@postgresql.org
Cc: pgsql-general@postgresql.org
Subject: Re: What does error "psql: Kerberos 5 authentication not supported" means?
Date: Thu, 24 Mar 2011 22:18:00 -0400
Message-ID: <C9B21C18.2240%Yandong.Yao@EMC.COM> (raw)
In-Reply-To: <AANLkTi=53=RbQD81MRN1Z27M86_tUZ84ccQydLSbohLc@mail.gmail.com>
Hi Willy and Raghu,
I rebuild from source code with kerberos/gssapi support, and changed to use 'gss' authentication method, it works now :)!
Thanks very much for your kindly help.
Regards,
Yandong
From: raghu ram <raghuchennuru@gmail.com<mailto:raghuchennuru@gmail.com>>
Date: Thu, 24 Mar 2011 11:09:33 -0400
To: Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>>
Cc: bjcoe <Yandong.Yao@EMC.COM<mailto:Yandong.Yao@EMC.COM>>, "pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>" <pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>>, "pgsql-general@postgresql.org<mailto:pgsql-general@postgresql.org>" <pgsql-general@postgresql.org<mailto:pgsql-general@postgresql.org>>
Subject: Re: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means?
On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>> wrote:
BTW, is there a way to find out what particular configure options were used for any given (binary) installation?
The pg_config utility prints configuration parameters of the currently installed version of PostgreSQL
--configure
Print the options that were given to the configure script when PostgreSQL was configured for building. This can be used to reproduce the identical configuration, or to find out with what options a binary package was built.
--Raghu Ram
WBL
On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>> wrote:
Hi,
I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support.
That would make sense if you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
"Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgraded installations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead."
hth,
WBL
On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com<mailto:Yandong.Yao@emc.com>> wrote:
Hi Guys,
I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10.
When I use:
$ psql –h ubuntu.server –U gavin dbname
I get following error:
psql: Kerberos 5 authentication not supported.
And from the server side of postgresql, I could see following log:
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0
2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
postgres: Software caused connection abort from krb5_recvauth
2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin"
2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
What does this means and how could I get more verbose logs?
Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?
Thanks very much in advance!
Regards,
Yandong
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: Yandong.Yao@emc.com, raghuchennuru@gmail.com, willybas@gmail.com, pgsql-general@postgresql.org
Subject: Re: What does error "psql: Kerberos 5 authentication not supported" means?
In-Reply-To: <C9B21C18.2240%Yandong.Yao@EMC.COM>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox