Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server - Mailing list pgsql-admin

El mar, 14-01-2014 a las 08:19 -0500, Stephen Frost escribió:
> * jaime soler (jaime.soler@gmail.com) wrote:
> > psql: SSPI continuation error: The encryption type requested is not
> > supported by the KDC. (80090342)
>
> [...]
>
> > ktpass -out postgres.keytab -princ
> > postgres/hostname@domain -mapUser postgres -pass
> > XXX -crypto DES-CBC-MD5
>
> Not 100% sure this is it, but it looks like you're using an ancient
> encryption algo which is no longer supported by MIT Kerberos (very
> intentionally...).  Why aren't you using AES256 instead?

So, should I use ALL as argument to -crypto option as it follows  ?

 ktpass -out postgres.keytab -princ
 postgres/hostname@domain -mapUser postgres -pass
 XXX -crypto ALL


Thanks,
Jaime

>
>     Thanks,
>
>         Stephen