pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedWhat does error "psql: Kerberos 5 authentication not supported" means?
6+ messages / 4 participants
[nested] [flat]
* What does error "psql: Kerberos 5 authentication not supported" means?
@ 2011-03-23 16:44 Yandong.Yao@emc.com
2011-03-24 13:11 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
0 siblings, 1 reply; 6+ messages in thread
From: Yandong.Yao@emc.com @ 2011-03-23 16:44 UTC (permalink / raw)
To: pgsql-admin; pgsql-general@postgresql.org
Hi Guys,
I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10.
When I use:
$ psql –h ubuntu.server –U gavin dbname
I get following error:
psql: Kerberos 5 authentication not supported.
And from the server side of postgresql, I could see following log:
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0
2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
postgres: Software caused connection abort from krb5_recvauth
2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin"
2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
What does this means and how could I get more verbose logs?
Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?
Thanks very much in advance!
Regards,
Yandong
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: What does error "psql: Kerberos 5 authentication not supported" means?
2011-03-23 16:44 What does error "psql: Kerberos 5 authentication not supported" means? Yandong.Yao@emc.com
@ 2011-03-24 13:11 ` Willy-Bas Loos <willybas@gmail.com>
2011-03-24 13:19 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
0 siblings, 1 reply; 6+ messages in thread
From: Willy-Bas Loos @ 2011-03-24 13:11 UTC (permalink / raw)
To: Yandong.Yao@emc.com; +Cc: pgsql-admin; pgsql-general@postgresql.org
Hi,
I'm not quite sure but it probably means that postgresql was not built with
kerberos 5 support.
That would make sense if you are using a binary install (did not compile
from source), because of the notice at
http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
"Note: Native Kerberos authentication has been deprecated and should be used
only for backward compatibility. New and upgraded installations are
encouraged to use the industry-standard GSSAPI authentication method (see
Section 19.3.3) instead."
hth,
WBL
On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com> wrote:
> Hi Guys,
>
> I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu
> 10.10.
>
> When I use:
> $ psql –h ubuntu.server –U gavin dbname
>
> I get following error:
> psql: Kerberos 5 authentication not supported.
>
> And from the server side of postgresql, I could see following log:
>
> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
> 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
> 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
> 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
> 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
> 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
> 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
> 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
> 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited
> with exit code 0
> 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
> 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
> 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
> postgres: Software caused connection abort from krb5_recvauth
> 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for
> user "gavin"
> 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
> 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
> 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
> 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
>
> What does this means and how could I get more verbose logs?
>
> Besides, is there any more howto/doc on integrate kerberos and postgresql
> besides the official documentation at
> http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?
>
>
> Thanks very much in advance!
>
> Regards,
> Yandong
>
>
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin
>
--
"Patriotism is the conviction that your country is superior to all others
because you were born in it." -- George Bernard Shaw
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: What does error "psql: Kerberos 5 authentication not supported" means?
2011-03-23 16:44 What does error "psql: Kerberos 5 authentication not supported" means? Yandong.Yao@emc.com
2011-03-24 13:11 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
@ 2011-03-24 13:19 ` Willy-Bas Loos <willybas@gmail.com>
2011-03-24 15:09 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Tom Lane <tgl@sss.pgh.pa.us>
2011-03-24 15:09 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? raghu ram <raghuchennuru@gmail.com>
0 siblings, 2 replies; 6+ messages in thread
From: Willy-Bas Loos @ 2011-03-24 13:19 UTC (permalink / raw)
To: Yandong.Yao@emc.com; +Cc: pgsql-admin; pgsql-general@postgresql.org
BTW, is there a way to find out what particular configure options were used
for any given (binary) installation?
WBL
On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@gmail.com> wrote:
> Hi,
>
> I'm not quite sure but it probably means that postgresql was not built with
> kerberos 5 support.
> That would make sense if you are using a binary install (did not compile
> from source), because of the notice at
> http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
> "Note: Native Kerberos authentication has been deprecated and should be
> used only for backward compatibility. New and upgraded installations are
> encouraged to use the industry-standard GSSAPI authentication method (see
> Section 19.3.3) instead."
>
> hth,
>
> WBL
>
>
> On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com> wrote:
>
>> Hi Guys,
>>
>> I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu
>> 10.10.
>>
>> When I use:
>> $ psql –h ubuntu.server –U gavin dbname
>>
>> I get following error:
>> psql: Kerberos 5 authentication not supported.
>>
>> And from the server side of postgresql, I could see following log:
>>
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
>> 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited
>> with exit code 0
>> 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
>> 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
>> 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
>> postgres: Software caused connection abort from krb5_recvauth
>> 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed
>> for user "gavin"
>> 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
>>
>> What does this means and how could I get more verbose logs?
>>
>> Besides, is there any more howto/doc on integrate kerberos and postgresql
>> besides the official documentation at
>> http://www.postgresql.org/docs/9.0/interactive/client-authentication.html
>> ?
>>
>>
>> Thanks very much in advance!
>>
>> Regards,
>> Yandong
>>
>>
>>
>> --
>> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
>> To make changes to your subscription:
>> http://www.postgresql.org/mailpref/pgsql-admin
>>
>
>
>
> --
> "Patriotism is the conviction that your country is superior to all others
> because you were born in it." -- George Bernard Shaw
>
--
"Patriotism is the conviction that your country is superior to all others
because you were born in it." -- George Bernard Shaw
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: What does error "psql: Kerberos 5 authentication not supported" means?
2011-03-23 16:44 What does error "psql: Kerberos 5 authentication not supported" means? Yandong.Yao@emc.com
2011-03-24 13:11 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
2011-03-24 13:19 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
@ 2011-03-24 15:09 ` Tom Lane <tgl@sss.pgh.pa.us>
1 sibling, 0 replies; 6+ messages in thread
From: Tom Lane @ 2011-03-24 15:09 UTC (permalink / raw)
To: Willy-Bas Loos <willybas@gmail.com>; +Cc: Yandong.Yao@emc.com; pgsql-admin; pgsql-general@postgresql.org
Willy-Bas Loos <willybas@gmail.com> writes:
> BTW, is there a way to find out what particular configure options were used
> for any given (binary) installation?
Run pg_config.
regards, tom lane
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: What does error "psql: Kerberos 5 authentication not supported" means?
2011-03-23 16:44 What does error "psql: Kerberos 5 authentication not supported" means? Yandong.Yao@emc.com
2011-03-24 13:11 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
2011-03-24 13:19 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
@ 2011-03-24 15:09 ` raghu ram <raghuchennuru@gmail.com>
2011-03-25 02:18 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Yandong.Yao@emc.com
1 sibling, 1 reply; 6+ messages in thread
From: raghu ram @ 2011-03-24 15:09 UTC (permalink / raw)
To: Willy-Bas Loos <willybas@gmail.com>; +Cc: Yandong.Yao@emc.com; pgsql-admin; pgsql-general@postgresql.org
On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos <willybas@gmail.com> wrote:
> BTW, is there a way to find out what particular configure options were used
> for any given (binary) installation?
>
>
The *pg_config* utility prints configuration parameters of the currently
installed version of PostgreSQL
*--configure*
Print the options that were given to the *configure* script when PostgreSQL
was configured for building. This can be used to reproduce the identical
configuration, or to find out with what options a binary package was built.
--Raghu Ram
> WBL
>
>
> On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@gmail.com>wrote:
>
>> Hi,
>>
>> I'm not quite sure but it probably means that postgresql was not built
>> with kerberos 5 support.
>> That would make sense if you are using a binary install (did not compile
>> from source), because of the notice at
>> http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
>> "Note: Native Kerberos authentication has been deprecated and should be
>> used only for backward compatibility. New and upgraded installations are
>> encouraged to use the industry-standard GSSAPI authentication method (see
>> Section 19.3.3) instead."
>>
>> hth,
>>
>> WBL
>>
>>
>> On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com> wrote:
>>
>>> Hi Guys,
>>>
>>> I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu
>>> 10.10.
>>>
>>> When I use:
>>> $ psql –h ubuntu.server –U gavin dbname
>>>
>>> I get following error:
>>> psql: Kerberos 5 authentication not supported.
>>>
>>> And from the server side of postgresql, I could see following log:
>>>
>>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
>>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to
>>> make
>>> 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
>>> 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
>>> 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited
>>> with exit code 0
>>> 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
>>> 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
>>> 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
>>> postgres: Software caused connection abort from krb5_recvauth
>>> 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed
>>> for user "gavin"
>>> 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
>>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
>>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
>>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to
>>> make
>>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>>> 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
>>>
>>> What does this means and how could I get more verbose logs?
>>>
>>> Besides, is there any more howto/doc on integrate kerberos and postgresql
>>> besides the official documentation at
>>> http://www.postgresql.org/docs/9.0/interactive/client-authentication.html
>>> ?
>>>
>>>
>>> Thanks very much in advance!
>>>
>>> Regards,
>>> Yandong
>>>
>>>
>>>
>>> --
>>> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
>>> To make changes to your subscription:
>>> http://www.postgresql.org/mailpref/pgsql-admin
>>>
>>
>>
>>
>> --
>> "Patriotism is the conviction that your country is superior to all others
>> because you were born in it." -- George Bernard Shaw
>>
>
>
>
> --
> "Patriotism is the conviction that your country is superior to all others
> because you were born in it." -- George Bernard Shaw
>
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: What does error "psql: Kerberos 5 authentication not supported" means?
2011-03-23 16:44 What does error "psql: Kerberos 5 authentication not supported" means? Yandong.Yao@emc.com
2011-03-24 13:11 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
2011-03-24 13:19 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? Willy-Bas Loos <willybas@gmail.com>
2011-03-24 15:09 ` Re: What does error "psql: Kerberos 5 authentication not supported" means? raghu ram <raghuchennuru@gmail.com>
@ 2011-03-25 02:18 ` Yandong.Yao@emc.com
0 siblings, 0 replies; 6+ messages in thread
From: Yandong.Yao@emc.com @ 2011-03-25 02:18 UTC (permalink / raw)
To: raghuchennuru@gmail.com; willybas@gmail.com; +Cc: pgsql-admin; pgsql-general@postgresql.org
Hi Willy and Raghu,
I rebuild from source code with kerberos/gssapi support, and changed to use 'gss' authentication method, it works now :)!
Thanks very much for your kindly help.
Regards,
Yandong
From: raghu ram <raghuchennuru@gmail.com<mailto:raghuchennuru@gmail.com>>
Date: Thu, 24 Mar 2011 11:09:33 -0400
To: Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>>
Cc: bjcoe <Yandong.Yao@EMC.COM<mailto:Yandong.Yao@EMC.COM>>, "pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>" <pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>>, "pgsql-general@postgresql.org<mailto:pgsql-general@postgresql.org>" <pgsql-general@postgresql.org<mailto:pgsql-general@postgresql.org>>
Subject: Re: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means?
On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>> wrote:
BTW, is there a way to find out what particular configure options were used for any given (binary) installation?
The pg_config utility prints configuration parameters of the currently installed version of PostgreSQL
--configure
Print the options that were given to the configure script when PostgreSQL was configured for building. This can be used to reproduce the identical configuration, or to find out with what options a binary package was built.
--Raghu Ram
WBL
On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>> wrote:
Hi,
I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support.
That would make sense if you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
"Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgraded installations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead."
hth,
WBL
On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com<mailto:Yandong.Yao@emc.com>> wrote:
Hi Guys,
I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10.
When I use:
$ psql –h ubuntu.server –U gavin dbname
I get following error:
psql: Kerberos 5 authentication not supported.
And from the server side of postgresql, I could see following log:
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0
2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
postgres: Software caused connection abort from krb5_recvauth
2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin"
2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
What does this means and how could I get more verbose logs?
Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?
Thanks very much in advance!
Regards,
Yandong
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
^ permalink raw reply [nested|flat] 6+ messages in thread
end of thread, other threads:[~2011-03-25 02:18 UTC | newest]
Thread overview: 6+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2011-03-23 16:44 What does error "psql: Kerberos 5 authentication not supported" means? Yandong.Yao@emc.com
2011-03-24 13:11 ` Willy-Bas Loos <willybas@gmail.com>
2011-03-24 13:19 ` Willy-Bas Loos <willybas@gmail.com>
2011-03-24 15:09 ` Tom Lane <tgl@sss.pgh.pa.us>
2011-03-24 15:09 ` raghu ram <raghuchennuru@gmail.com>
2011-03-25 02:18 ` Yandong.Yao@emc.com
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox