some errors with using Kerberos authentication in PSQL

From: rahimeh khodadadi <rahimeh(dot)khodadadi(at)gmail(dot)com>
To: pgsql-admin(at)postgresql(dot)org
Subject: some errors with using Kerberos authentication in PSQL
Date: 2009-11-29 05:43:37
Message-ID: bbeb3140911282143t735d19c3t1234764ab1d02f56@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Hi,

I try to setup kerberos authentication in Postgresql 8.1.18 on centos.

But I have some problem.

1) The configuration of krb5.conf is:
[realms]
EXAMPLE.COM <http://example.com/><http://EXAMPLE.COM <http://example.com/>
>
> > ={
>
> kdc=star :88
> admin_server=star:749
> default_domain= example.com<http://example.com>
> }
> .....
>
> 2) Then, I created principal as " postgres/star(at)EXAMPLE(dot)COM<mailto:
> star(at)EXAMPLE(dot)COM> " and its password is saved in
> '/usr/local/pgsql/data/postgresql.keytab' .
>
>
> (star is localhost IP, but in hosts.conf I configure like: 213.233.169.93
> star)
>
> 3) I setup postgresql.conf as below:
>
> krb_server_keyfile = '/usr/local/pgsql/data/
> postgresql.keytab'
> krb_srvname = 'postgres/star(at)EXAMPLE(dot)COM<mailto:star(at)EXAMPLE(dot)COM>'
>
> krb_server_hostname = 'star' # empty string matches any keytab
> entry
> krb_caseins_users = off
>
> 4) I create user "frank" in Psql .
>
> 5) Then I set up hba.conf :
>
> host all all 0.0.0.0/0<http://0.0.0.0/0>
> krb5
> host all all 127.0.0.1/32<http://127.0.0.1/32>
> krb5
>
>
> When I want to connect to Postgresql, it gives error.
>
> # kinit frank
>
> [root(at)star bin]# ./psql -h star -U frank -d test
>
> psql: krb5_sendauth: Bad application version was sent (via sendauth)
>
> I should mention that both postgresql server and krb-server are in same
> system and my IP is acquring from dhcp server of university. Where is
> wrong.
>
> Please help me. I serverly need it.
>

--
With Best Regards
Miss.KHodadadi

Browse pgsql-admin by date

  From Date Subject
Next Message Marty Dinniss 2009-11-30 01:33:45 Windows 7
Previous Message Ludwik Dylag 2009-11-28 14:54:35 Postgresql logging_collector = off ignored ?