| From: | Brian Crowell <brian(at)fluggo(dot)com> |
|---|---|
| To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
| Cc: | pgsql-bugs(at)postgresql(dot)org |
| Subject: | Re: BUG #9337: SSPI/GSSAPI with mismatched user names |
| Date: | 2014-02-24 18:55:45 |
| Message-ID: | CAAQkdDocR8b8ka=-qJFMgEoNdafzU2naaGh8wEaL7RCYH75DfA@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-bugs |
On Mon, Feb 24, 2014 at 12:50 PM, Brian Crowell <brian(at)fluggo(dot)com> wrote:
> 2014-02-24 11:30:40 CST LOG: provided user name (Brian) and
> authenticated user name (BCrowell(at)REALM(dot)COM) do not match
>
> But the Kerberos ticket is perfectly valid, and matches a Postgres
> user. In this case, the program attempting to log in is incapable of
> determining the correct Postgres user name to send (see Npgsql bug for
> the dirty details), so why not just accept the Kerberos principal
> name?
Or in other words, I'm trying to log in as the Postgres user
"BCrowell(at)REALM(dot)COM" (which is in the Kerberos ticket), and not as
"Brian" (which is in the startup packet, because Npgsql doesn't know
what else to do).
--Brian
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Stephen Frost | 2014-02-24 18:56:53 | Re: BUG #9337: SSPI/GSSAPI with mismatched user names |
| Previous Message | Brian Crowell | 2014-02-24 18:50:20 | Re: BUG #9337: SSPI/GSSAPI with mismatched user names |