Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: jaime soler <jaime(dot)soler(at)gmail(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server
Date: 2014-01-14 13:19:36
Message-ID: 20140114131936.GU2686@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

* jaime soler (jaime(dot)soler(at)gmail(dot)com) wrote:
> psql: SSPI continuation error: The encryption type requested is not
> supported by the KDC. (80090342)

[...]

> ktpass -out postgres.keytab -princ
> postgres/hostname(at)domain -mapUser postgres -pass
> XXX -crypto DES-CBC-MD5

Not 100% sure this is it, but it looks like you're using an ancient
encryption algo which is no longer supported by MIT Kerberos (very
intentionally...). Why aren't you using AES256 instead?

Thanks,

Stephen

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Dubravko Sever 2014-01-14 13:25:19 Re: Taking hot backup of slave node in postgres (master-slave config with repmgr)
Previous Message Andrey Nikitin 2014-01-14 12:36:53 Taking hot backup of slave node in postgres (master-slave config with repmgr)