From: | Willy-Bas Loos <willybas(at)gmail(dot)com> |
---|---|
To: | Yandong(dot)Yao(at)emc(dot)com |
Cc: | pgsql-admin(at)postgresql(dot)org, pgsql-general(at)postgresql(dot)org |
Subject: | Re: What does error "psql: Kerberos 5 authentication not supported" means? |
Date: | 2011-03-24 13:19:03 |
Message-ID: | AANLkTinPmghUwBiV0ecTVF8-qgRPjmTFid7e0ni8QG1+@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin pgsql-general |
BTW, is there a way to find out what particular configure options were used
for any given (binary) installation?
WBL
On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas(at)gmail(dot)com> wrote:
> Hi,
>
> I'm not quite sure but it probably means that postgresql was not built with
> kerberos 5 support.
> That would make sense if you are using a binary install (did not compile
> from source), because of the notice at
> http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
> "Note: Native Kerberos authentication has been deprecated and should be
> used only for backward compatibility. New and upgraded installations are
> encouraged to use the industry-standard GSSAPI authentication method (see
> Section 19.3.3) instead."
>
> hth,
>
> WBL
>
>
> On Wed, Mar 23, 2011 at 5:44 PM, <Yandong(dot)Yao(at)emc(dot)com> wrote:
>
>> Hi Guys,
>>
>> I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu
>> 10.10.
>>
>> When I use:
>> $ psql –h ubuntu.server –U gavin dbname
>>
>> I get following error:
>> psql: Kerberos 5 authentication not supported.
>>
>> And from the server side of postgresql, I could see following log:
>>
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
>> 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
>> 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited
>> with exit code 0
>> 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
>> 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
>> 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
>> postgres: Software caused connection abort from krb5_recvauth
>> 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed
>> for user "gavin"
>> 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
>> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
>> 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
>>
>> What does this means and how could I get more verbose logs?
>>
>> Besides, is there any more howto/doc on integrate kerberos and postgresql
>> besides the official documentation at
>> http://www.postgresql.org/docs/9.0/interactive/client-authentication.html
>> ?
>>
>>
>> Thanks very much in advance!
>>
>> Regards,
>> Yandong
>>
>>
>>
>> --
>> Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org)
>> To make changes to your subscription:
>> http://www.postgresql.org/mailpref/pgsql-admin
>>
>
>
>
> --
> "Patriotism is the conviction that your country is superior to all others
> because you were born in it." -- George Bernard Shaw
>
--
"Patriotism is the conviction that your country is superior to all others
because you were born in it." -- George Bernard Shaw
From | Date | Subject | |
---|---|---|---|
Next Message | raghu ram | 2011-03-24 13:43:15 | Re: ERROR: could not access status of transaction |
Previous Message | Willy-Bas Loos | 2011-03-24 13:11:11 | Re: What does error "psql: Kerberos 5 authentication not supported" means? |
From | Date | Subject | |
---|---|---|---|
Next Message | Merlin Moncure | 2011-03-24 13:23:51 | Re: Deadlock in libpq |
Previous Message | Willy-Bas Loos | 2011-03-24 13:11:11 | Re: What does error "psql: Kerberos 5 authentication not supported" means? |