pod@herald.ox.ac.uk (pod) writes:
> PostgreSQL-Version: 7.4.7
> It is not always possible to use krb5 authentication to a server that is
> listening on multiple interfaces other than to the 'primary' interface.
> More specifically: src/backend/libpq/auth.c pg_krb5_init() fills in the
> pg_krb5_server principal with a call to krb5_sname_to_principal with NULL
> as the second argument (the hostname argument).
I see this has been changed in CVS tip, but I don't know enough about
Kerberos to know whether the change addresses your operational problem.
> I append a patch that 'fixes' behaviour for the limited case where a
> virtual_host is specified in /etc/postgresql/postgresql.conf.
VirtualHost is long gone, so this patch is of little help anyway. Could
you take a look at CVS or a recent nightly snapshot (look under dev/ on
the FTP servers) and see if your problem is fixed or not?
regards, tom lane
