Re: What does error "psql: Kerberos 5 authentication not supported" means? - Mailing list pgsql-admin

BTW, is there a way to find out what particular configure options were used for any given (binary) installation?

WBL

On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@gmail.com> wrote:

Hi,

I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support.

That would make sense if  you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH

"Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgraded installations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead."

hth,

WBL

On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com> wrote:

Hi Guys,

I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10.

When I use:
$ psql –h ubuntu.server –U gavin  dbname

I get following error:
psql: Kerberos 5 authentication not supported.

And from the server side of postgresql, I could see following log:

2011-03-23 09:14:17 PDT LOCATION:  proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG:  00000: exit(0)
2011-03-23 09:14:17 PDT LOCATION:  proc_exit, ipc.c:135
2011-03-23 09:14:17 PDT DEBUG:  00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION:  shmem_exit, ipc.c:211
2011-03-23 09:14:17 PDT DEBUG:  00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION:  proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG:  00000: reaping dead processes
2011-03-23 09:14:17 PDT LOCATION:  reaper, postmaster.c:2243
2011-03-23 09:14:17 PDT DEBUG:  00000: server process (PID 4592) exited with exit code 0
2011-03-23 09:14:17 PDT LOCATION:  LogChildExit, postmaster.c:2725
2011-03-23 09:14:24 PDT LOG:  00000: Kerberos recvauth returned error 103
2011-03-23 09:14:24 PDT LOCATION:  pg_krb5_recvauth, auth.c:721
postgres: Software caused connection abort from krb5_recvauth
2011-03-23 09:14:24 PDT FATAL:  28000: Kerberos 5 authentication failed for user "gavin"
2011-03-23 09:14:24 PDT LOCATION:  auth_failed, auth.c:273
2011-03-23 09:14:24 PDT DEBUG:  00000: shmem_exit(1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION:  shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG:  00000: proc_exit(1): 1 callbacks to make
2011-03-23 09:14:24 PDT LOCATION:  proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG:  00000: exit(1)
2011-03-23 09:14:24 PDT LOCATION:  proc_exit, ipc.c:135
2011-03-23 09:14:24 PDT DEBUG:  00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION:  shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG:  00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION:  proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG:  00000: reaping dead processes

What does this means and how could I get more verbose logs?

Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?


Thanks very much in advance!

Regards,
Yandong



--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw

--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw