Re: What does error "psql: Kerberos 5 authentication not supported" means?

Hi Willy and Raghu,

I rebuild from source code with kerberos/gssapi support, and changed to use 'gss' authentication method, it works now :)!

Thanks very much for your kindly help.

Regards,
Yandong

From: raghu ram <raghuchennuru(at)gmail(dot)com<mailto:raghuchennuru(at)gmail(dot)com>>
Date: Thu, 24 Mar 2011 11:09:33 -0400
To: Willy-Bas Loos <willybas(at)gmail(dot)com<mailto:willybas(at)gmail(dot)com>>
Cc: bjcoe <Yandong(dot)Yao(at)EMC(dot)COM<mailto:Yandong(dot)Yao(at)EMC(dot)COM>>, "pgsql-admin(at)postgresql(dot)org<mailto:pgsql-admin(at)postgresql(dot)org>" <pgsql-admin(at)postgresql(dot)org<mailto:pgsql-admin(at)postgresql(dot)org>>, "pgsql-general(at)postgresql(dot)org<mailto:pgsql-general(at)postgresql(dot)org>" <pgsql-general(at)postgresql(dot)org<mailto:pgsql-general(at)postgresql(dot)org>>
Subject: Re: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means?

On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos <willybas(at)gmail(dot)com<mailto:willybas(at)gmail(dot)com>> wrote:
BTW, is there a way to find out what particular configure options were used for any given (binary) installation?

The pg_config utility prints configuration parameters of the currently installed version of PostgreSQL

--configure

Print the options that were given to the configure script when PostgreSQL was configured for building. This can be used to reproduce the identical configuration, or to find out with what options a binary package was built.

--Raghu Ram

WBL

On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas(at)gmail(dot)com<mailto:willybas(at)gmail(dot)com>> wrote:
Hi,

I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support.
That would make sense if you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
"Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgraded installations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead."

hth,

WBL

On Wed, Mar 23, 2011 at 5:44 PM, <Yandong(dot)Yao(at)emc(dot)com<mailto:Yandong(dot)Yao(at)emc(dot)com>> wrote:
Hi Guys,

I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10.

When I use:
$ psql –h ubuntu.server –U gavin dbname

I get following error:
psql: Kerberos 5 authentication not supported.

And from the server side of postgresql, I could see following log:

2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0
2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
postgres: Software caused connection abort from krb5_recvauth
2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin"
2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes

What does this means and how could I get more verbose logs?

Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?

Thanks very much in advance!

Regards,
Yandong

--
Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org<mailto:pgsql-admin(at)postgresql(dot)org>)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw

--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw