From: | M Blume <mblume1(at)gmail(dot)com> |
---|---|
To: | pgsql-general(at)lists(dot)postgresql(dot)org |
Subject: | New setup of pgadmin4 with kerberos not working |
Date: | 2022-12-21 21:11:31 |
Message-ID: | CAJ5rK-63cbBb4AACOLj8si-Vnu2UR46gB0YN9N5n-8fSeayHew@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
All -
I am new to Postgres and Kerberos.
That said, I built out Postgres db. I got a keytab file from AD.
I'm sure it's all sorts of wonky but I did follow instructions and got
guidance.
Client based user authentication works from another linux server, after
running kinit.
What I can't get working is pgadmin4 as a client.
pgadmin4 local user account to the db works.
pgadmin4 AD account "abcuser" does not work.
pgadmin4 config_local... default except
AUTHENTICATION_SOURCES = ['kerberos', 'internal']
KRB_AUTO_CREATE_USER = True
Inside pgadmin4, I set up Connection tab like this:
Hostname = xyzserver
Port = 5432
Maintenance database = postgres
Username = abcuser
Kerberos authentication? = ON
*Error*:
connection to server at xyzserver (10.2.3.4) failed: GSSAPI continuation
error: No credentials were supplied, or the credentials were unavailable or
inaccessible. No kerberos credentials available (default cache: KCM:)
*postgresql.log :*
GSSAPI authentication failed for user "abcuser"
Connection matched pg_hba.conf line
"host all all 10.x.y.z/8 gss include_realm=0 krb_realm=AD.COM"
Docs talk about requiring kerberos keytab for pgadmin4 but I have 2
problems with that. 1) I don't have a registered DNS entry 2) I'm not part
of the AD team. It took work to get the keytab file for the db. I'd like to
avoid it for clients!
From | Date | Subject | |
---|---|---|---|
Next Message | Laurenz Albe | 2022-12-21 21:34:43 | Re: Regd. the Implementation of Wallet (in Oracle) config equivalent in postgreSQL whilst the database migration |
Previous Message | Sandeep Saxena | 2022-12-21 19:21:15 | Re: Regd. the Implementation of Wallet (in Oracle) config equivalent in postgreSQL whilst the database migration |