GSSAPI / Kerberos Authentication - Mailing list pgsql-admin

From Weingartner, Steven
Subject GSSAPI / Kerberos Authentication
Date
Msg-id 54213787d7c441bb9981e2e031709aa5@MS-EX13RB-P007.corp.SE.sempra.com
Whole thread Raw
Responses Re: GSSAPI / Kerberos Authentication
List pgsql-admin

I am currently trying to configure a Centos6.x – postgresql-9.3 server to authenticate using gssapi.  I have several servers I have already configured and are working (a combination of Oracle Linux and Centos, all 6.x series with 9.2,3 or 4).  Our company use vas for an interface to Kerberos, The errors I am getting are as follows:

 

[sweingar@pglgisprtd001 ~]$ psql -hpglgisprtd001 -dpostgres

psql: GSSAPI continuation error: Unspecified GSS failure.  Minor code may provide more information

GSSAPI continuation error: Server not found in Kerberos database

 

or from a windows client

 

C:\Users\sweingar>psql -hpglgisprtd001.sempra.com -Usweingar

psql: SSPI continuation error: The specified target is unknown or unreachable

(80090303)

 

I see nothing worthwhile in the postgresql log, nor in /var/log/messages.  I have verified the dns record to my kdc works (or at least I can ping), I am sort of at a loss of where to look next.

pgsql-admin by date:

Previous
From: Ganesh Kannan
Date:
Subject: After Upgrade to Postgres 9.5 space not being released
Next
From: Bear Giles
Date:
Subject: Re: GSSAPI / Kerberos Authentication