Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id BF6B51337BC2 for ; Thu, 24 Mar 2011 23:18:40 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 55835-04; Fri, 25 Mar 2011 02:18:33 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from mexforward.lss.emc.com (mexforward.lss.emc.com [128.222.32.20]) by mail.postgresql.org (Postfix) with ESMTP id CA1F31337990; Thu, 24 Mar 2011 23:18:32 -0300 (ADT) Received: from hop04-l1d11-si02.isus.emc.com (HOP04-L1D11-SI02.isus.emc.com [10.254.111.55]) by mexforward.lss.emc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id p2P2IVZ6018782 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 24 Mar 2011 22:18:31 -0400 Received: from mailhub.lss.emc.com (mailhubhoprd04.lss.emc.com [10.254.222.226]) by hop04-l1d11-si02.isus.emc.com (RSA Interceptor); Thu, 24 Mar 2011 22:18:24 -0400 Received: from mxhub11.corp.emc.com (mxhub11.corp.emc.com [10.254.92.106]) by mailhub.lss.emc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id p2P2I5WN008124; Thu, 24 Mar 2011 22:18:05 -0400 Received: from mx17a.corp.emc.com ([169.254.1.53]) by mxhub11.corp.emc.com ([10.254.92.106]) with mapi; Thu, 24 Mar 2011 22:18:05 -0400 From: To: , CC: , Date: Thu, 24 Mar 2011 22:18:00 -0400 Subject: Re: What does error "psql: Kerberos 5 authentication not supported" means? Thread-Topic: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means? Thread-Index: Acvqkt9bylow+ocgQmWgt8mhXBKi5w== Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.2.0.101115 acceptlanguage: en-US Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-EMM-MHVC: 1 X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-4.21 tagged_above=-10 required=5 tests=BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: X-Archive-Number: 201103/242 X-Sequence-Number: 37114 Hi Willy and Raghu, I rebuild from source code with kerberos/gssapi support, and changed to use= 'gss' authentication method, it works now :)! Thanks very much for your kindly help. Regards, Yandong From: raghu ram > Date: Thu, 24 Mar 2011 11:09:33 -0400 To: Willy-Bas Loos > Cc: bjcoe >, "pgsql-admin@p= ostgresql.org" >, "pgsql-general@postgresql.org" > Subject: Re: [ADMIN] What does error "psql: Kerberos 5 authentication not s= upported" means? On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos > wrote: BTW, is there a way to find out what particular configure options were used= for any given (binary) installation? The pg_config utility prints configuration parameters of the currently inst= alled version of PostgreSQL --configure Print the options that were given to the configure script when PostgreSQL w= as configured for building. This can be used to reproduce the identical con= figuration, or to find out with what options a binary package was built. --Raghu Ram WBL On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos > wrote: Hi, I'm not quite sure but it probably means that postgresql was not built with= kerberos 5 support. That would make sense if you are using a binary install (did not compile f= rom source), because of the notice at http://www.postgresql.org/docs/9.0/in= teractive/auth-methods.html#KERBEROS-AUTH "Note: Native Kerberos authentication has been deprecated and should be use= d only for backward compatibility. New and upgraded installations are encou= raged to use the industry-standard GSSAPI authentication method (see Sectio= n 19.3.3) instead." hth, WBL On Wed, Mar 23, 2011 at 5:44 PM, > wrote: Hi Guys, I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10= .10. When I use: $ psql =96h ubuntu.server =96U gavin dbname I get following error: psql: Kerberos 5 authentication not supported. And from the server side of postgresql, I could see following log: 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0) 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited wit= h exit code 0 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721 postgres: Software caused connection abort from krb5_recvauth 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for= user "gavin" 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1) 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes What does this means and how could I get more verbose logs? Besides, is there any more howto/doc on integrate kerberos and postgresql b= esides the official documentation at http://www.postgresql.org/docs/9.0/int= eractive/client-authentication.html? Thanks very much in advance! Regards, Yandong -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin -- "Patriotism is the conviction that your country is superior to all others b= ecause you were born in it." -- George Bernard Shaw -- "Patriotism is the conviction that your country is superior to all others b= ecause you were born in it." -- George Bernard Shaw