Re: multiple Kerberos Server Principals from 1 instance of pgadmin

From: Ivan Novick <inovick(at)pivotal(dot)io>
To: Stephen Frost <sfrost(at)snowman(dot)net>
Cc: pgadmin-support(at)lists(dot)postgresql(dot)org
Subject: Re: multiple Kerberos Server Principals from 1 instance of pgadmin
Date: 2019-08-16 19:52:19
Message-ID: CAPJXddaJUTQt2aZGcUjZd3AGK210zayCPif-qfJKn1_TMfwfkg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgadmin-support

Hi Stephen,

For greenplum database it would be gpadmin instead of postgres

>
> PGKRBSRVNAME is typically either 'postgres' or 'POSTGRES', depending on
> if you are dealing with Active Directory clients or not. I agree that
> it's theoretically possible that you might need to be able to configure
> PGKRBSRVNAME on a per-server/cluster basis, but you definitely don't
> need to be able to do so on a per-database basis and the PGKRBSRVNAME
> has absolutely nothing to do with the user's username, nor the unix user
> that the server actually runs as.
>
> What, exactly, are you thinking that value would be set to?
>
> Can you show what klist -k /path/to/keytab on the PG server returns?
>
>
You can see here a sample output that gpadmin is referenced.
klist -k /var/spool/keytabs/gpadmin

Keytab name: FILE:/var/spool/keytabs/gpadmin

KVNO Timestamp Principal
---- -----------------
--------------------------------------------------------
2 04/09/15 06:56:33 gpadmin/srv101(dot)prd21(dot)acme(dot)com(at)is1(dot)acme
2 04/09/15 06:56:33 gpadmin/srv101(dot)prd21(dot)acme(dot)com(at)is1(dot)acme
2 04/09/15 06:56:33 gpadmin/srv101(dot)prd21(dot)acme(dot)com(at)is1(dot)acme
2 04/09/15 06:56:33 gpadmin/srv101(dot)prd21(dot)acme(dot)com(at)is1(dot)acme

What would help a lot is when setting up the Server properties in pgadmin4
if we could add a PGKRBSRVNAME variable so it can be different for each
server.

Does that make sense?

If the idea makes sense and is agreed, i could probably find a developer
that would be interested to help code it up and submit.

Thanks!
Ivan

In response to

Responses

Browse pgadmin-support by date

  From Date Subject
Next Message Stephen Frost 2019-08-16 19:57:30 Re: multiple Kerberos Server Principals from 1 instance of pgadmin
Previous Message Pierre Ochsenbein 2019-08-16 11:27:04 pgAdmin Citrix