MIME-Version: 1.0
References: 
 <CANpTS00WCqqCC4aMtOgKJ79RT-9r_fWQYPSkKuGDYWuKzaf-kA@mail.gmail.com>
 <CAMkU=1wZXRyKmaSOuxZ0GpOHUx4F8TKGetKr+JuaUKovS10H7g@mail.gmail.com>
In-Reply-To: 
 <CAMkU=1wZXRyKmaSOuxZ0GpOHUx4F8TKGetKr+JuaUKovS10H7g@mail.gmail.com>
From: "linux.il" <linux.il@gmail.com>
Date: Thu, 28 Apr 2022 20:46:50 +0300
Message-ID: 
 <CANpTS03keBuQAn9yZLTrqPTd7sEoK0Hyx4uReHDd2Nk4vUjoJg@mail.gmail.com>
Subject: Re: Weird GSSAPI error - trying to connect via SSH tunnel
To: Jeff Janes <jeff.janes@gmail.com>
Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000673b0e05ddba8307"
Archived-At: 
 <https://www.postgresql.org/message-id/CANpTS03keBuQAn9yZLTrqPTd7sEoK0Hyx4uReHDd2Nk4vUjoJg%40mail.gmail.com>
Precedence: bulk

--000000000000673b0e05ddba8307
Content-Type: text/plain; charset="UTF-8"

Jeff,
Many thanks! It indeed was my case - I tried to use the wrong password and
was confused by this error message.
Vitaly

On Thu, Apr 28, 2022 at 6:18 PM Jeff Janes <jeff.janes@gmail.com> wrote:

> On Thu, Apr 28, 2022 at 5:57 AM linux.il <linux.il@gmail.com> wrote:
>
>> Hi,
>> I'm trying to connect to AWS RDS instance with private IP using SSH
>> tunnel.
>> I have no problems with network/credentials - I tested SSH tunnel to my
>> Postgres server using command-line, and I was able to connect.
>> But no luck with PgAdmin  - I'm getting a GSSAPI error message (sorry for
>> screenshot, but Pgadmin for Mac doesn't allow me copy-paste text).
>>
>
> That is just log spam.  Since it found GSS credentials in the local
> environment, that is the first thing it tried.  But it failed, probably
> because the server didn't want to use it.  So then it moved on to the next
> method, which was password auth, and that also failed.That is the real
> error.  Look in the server log file to possibly get more details on that
> failure.  The error sent to unauthenticated users is intentionally vague to
> avoid leaking information.
>
> Cheers,
>
> Jeff
>
>

--000000000000673b0e05ddba8307
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Jeff,<div>Many thanks! It indeed was my case - I tried to =
use the wrong password and was confused by this error message.</div><div>Vi=
taly</div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gm=
ail_attr">On Thu, Apr 28, 2022 at 6:18 PM Jeff Janes &lt;<a href=3D"mailto:=
jeff.janes@gmail.com">jeff.janes@gmail.com</a>&gt; wrote:<br></div><blockqu=
ote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px=
 solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr"=
>On Thu, Apr 28, 2022 at 5:57 AM <a href=3D"http://linux.il" target=3D"_bla=
nk">linux.il</a> &lt;<a href=3D"mailto:linux.il@gmail.com" target=3D"_blank=
">linux.il@gmail.com</a>&gt; wrote:<br></div><div class=3D"gmail_quote"><bl=
ockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-lef=
t:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr">Hi,<div>I&#=
39;m trying to connect to AWS RDS instance with private IP using SSH tunnel=
.=C2=A0<br>I have no problems with network/credentials - I tested SSH tunne=
l to my Postgres server using command-line, and I was able to connect.<br>B=
ut no luck with PgAdmin=C2=A0 - I&#39;m getting a GSSAPI error message (sor=
ry for screenshot, but Pgadmin for Mac doesn&#39;t allow me copy-paste text=
).<br></div></div></blockquote><div><br></div><div>That is just log spam.=
=C2=A0 Since it found GSS credentials in the local environment, that is the=
 first thing it tried.=C2=A0 But it failed, probably because the server did=
n&#39;t want to use it.=C2=A0 So then it moved on to the next method, which=
 was password auth, and that also failed.That is the real error.=C2=A0 Look=
 in the server log file to possibly get more details=C2=A0on that failure.=
=C2=A0 The error sent to unauthenticated users is intentionally vague to av=
oid leaking information.</div><div><br></div><div>Cheers,</div><div><br></d=
iv><div>Jeff</div><div>=C2=A0</div></div></div>
</blockquote></div>

--000000000000673b0e05ddba8307--