From: | rahimeh khodadadi <rahimeh(dot)khodadadi(at)gmail(dot)com> |
---|---|
To: | pgsql-admin(at)postgresql(dot)org |
Subject: | some errors with using Kerberos authentication in PSQL |
Date: | 2009-11-29 05:43:37 |
Message-ID: | bbeb3140911282143t735d19c3t1234764ab1d02f56@mail.gmail.com |
Views: | Whole Thread | Raw Message | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
Hi,
I try to setup kerberos authentication in Postgresql 8.1.18 on centos.
But I have some problem.
1) The configuration of krb5.conf is:
[realms]
EXAMPLE.COM <http://example.com/><http://EXAMPLE.COM <http://example.com/>
>
> > ={
>
> kdc=star :88
> admin_server=star:749
> default_domain= example.com<http://example.com>
> }
> .....
>
> 2) Then, I created principal as " postgres/star(at)EXAMPLE(dot)COM<mailto:
> star(at)EXAMPLE(dot)COM> " and its password is saved in
> '/usr/local/pgsql/data/postgresql.keytab' .
>
>
> (star is localhost IP, but in hosts.conf I configure like: 213.233.169.93
> star)
>
> 3) I setup postgresql.conf as below:
>
> krb_server_keyfile = '/usr/local/pgsql/data/
> postgresql.keytab'
> krb_srvname = 'postgres/star(at)EXAMPLE(dot)COM<mailto:star(at)EXAMPLE(dot)COM>'
>
> krb_server_hostname = 'star' # empty string matches any keytab
> entry
> krb_caseins_users = off
>
> 4) I create user "frank" in Psql .
>
> 5) Then I set up hba.conf :
>
> host all all 0.0.0.0/0<http://0.0.0.0/0>
> krb5
> host all all 127.0.0.1/32<http://127.0.0.1/32>
> krb5
>
>
> When I want to connect to Postgresql, it gives error.
>
> # kinit frank
>
> [root(at)star bin]# ./psql -h star -U frank -d test
>
> psql: krb5_sendauth: Bad application version was sent (via sendauth)
>
> I should mention that both postgresql server and krb-server are in same
> system and my IP is acquring from dhcp server of university. Where is
> wrong.
>
> Please help me. I serverly need it.
>
--
With Best Regards
Miss.KHodadadi
From | Date | Subject | |
---|---|---|---|
Next Message | Marty Dinniss | 2009-11-30 01:33:45 | Windows 7 |
Previous Message | Ludwik Dylag | 2009-11-28 14:54:35 | Postgresql logging_collector = off ignored ? |