Re: What does error "psql: Kerberos 5 authentication not supported" means?

Hi,

I'm not quite sure but it probably means that postgresql was not built with
kerberos 5 support.
That would make sense if you are using a binary install (did not compile
from source), because of the notice at
http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
"Note: Native Kerberos authentication has been deprecated and should be used
only for backward compatibility. New and upgraded installations are
encouraged to use the industry-standard GSSAPI authentication method (see
Section 19.3.3) instead."

hth,

WBL

On Wed, Mar 23, 2011 at 5:44 PM, <Yandong(dot)Yao(at)emc(dot)com> wrote:

> Hi Guys,
>
> I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu
> 10.10.
>
> When I use:
> $ psql –h ubuntu.server –U gavin dbname
>
> I get following error:
> psql: Kerberos 5 authentication not supported.
>
> And from the server side of postgresql, I could see following log:
>
> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
> 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
> 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
> 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
> 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
> 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
> 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
> 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
> 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited
> with exit code 0
> 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
> 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
> 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
> postgres: Software caused connection abort from krb5_recvauth
> 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for
> user "gavin"
> 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
> 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
> 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
> 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
>
> What does this means and how could I get more verbose logs?
>
> Besides, is there any more howto/doc on integrate kerberos and postgresql
> besides the official documentation at
> http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?
>
>
> Thanks very much in advance!
>
> Regards,
> Yandong
>
>
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin
>

--
"Patriotism is the conviction that your country is superior to all others
because you were born in it." -- George Bernard Shaw