Re: BUG #9337: SSPI/GSSAPI with mismatched user names - Mailing list pgsql-bugs

From Brian Crowell
Subject Re: BUG #9337: SSPI/GSSAPI with mismatched user names
Date
Msg-id CAAQkdDocR8b8ka=-qJFMgEoNdafzU2naaGh8wEaL7RCYH75DfA@mail.gmail.com
Whole thread Raw
In response to Re: BUG #9337: SSPI/GSSAPI with mismatched user names  (Brian Crowell <brian@fluggo.com>)
Responses Re: BUG #9337: SSPI/GSSAPI with mismatched user names
List pgsql-bugs
On Mon, Feb 24, 2014 at 12:50 PM, Brian Crowell <brian@fluggo.com> wrote:
>   2014-02-24 11:30:40 CST LOG:  provided user name (Brian) and
> authenticated user name (BCrowell@REALM.COM) do not match
>
> But the Kerberos ticket is perfectly valid, and matches a Postgres
> user. In this case, the program attempting to log in is incapable of
> determining the correct Postgres user name to send (see Npgsql bug for
> the dirty details), so why not just accept the Kerberos principal
> name?

Or in other words, I'm trying to log in as the Postgres user
"BCrowell@REALM.COM" (which is in the Kerberos ticket), and not as
"Brian" (which is in the startup packet, because Npgsql doesn't know
what else to do).

--Brian

pgsql-bugs by date:

Previous
From: Brian Crowell
Date:
Subject: Re: BUG #9337: SSPI/GSSAPI with mismatched user names
Next
From: Stephen Frost
Date:
Subject: Re: BUG #9337: SSPI/GSSAPI with mismatched user names