Re: [JDBC] Error while connecting postgres db with Kerberos autentification - Mailing list pgsql-jdbc

From Bear Giles
Subject Re: [JDBC] Error while connecting postgres db with Kerberos autentification
Date
Msg-id CALBNtw7dxJscEtnDAkxfQ6YKBQZmoW6FEQifUPSYwaD5t24TeQ@mail.gmail.com
Whole thread Raw
In response to Re: [JDBC] Error while connecting postgres db with Kerberos autentification  (Лёсин Евгений Андреевич<Evgeniy.Lesin@OPEN.RU>)
List pgsql-jdbc
You need to specify the location of the JAAS config file that contains the information you provided. I'm drawing a complete blank on the default location or the system property to set to specify it but you can probably find it with a quick stack overflow search for 'jaas'.

On Fri, Jun 2, 2017 at 5:28 AM, Лёсин Евгений Андреевич <Evgeniy.Lesin@open.ru> wrote:

Sorry for confusing you.

 

When I try to connect to DB with DBeaver, which uses jdbc driver, error comes out:

 

GSS Authentication failed
javax.security.auth.login.LoginException: No LoginModules configured for pgjdbc

 

What is “pgjdbc”?

 

 

С уважением,

Лёсин Евгений

Главный специалист службы СДБО ФЛ, ИБ «Открытие Онлайн»

Вн. 18-6734

Моб. +7 900 312 22 20

 

From: davecramer@gmail.com [mailto:davecramer@gmail.com] On Behalf Of Dave Cramer
Sent: Friday, June 02, 2017 3:21 PM
To: Лёсин Евгений Андреевич
Cc: pgsql-jdbc@postgresql.org
Subject: Re: [JDBC] Error while connecting postgres db with Kerberos autentification

 

 

 

On 2 June 2017 at 07:11, Лёсин Евгений Андреевич <Evgeniy.Lesin@open.ru> wrote:

  • JDBC driver build number - postgresql-42.1.1
  • Server version – 9.5
  • Exact error message and stacktrace - below
  • What you were doing, ideally in code form

 

Sorry for my English.
DB is configured to except connections only with ssl and kerberos. I'm trying to connect tj this DB with my AD user and get this error:

GSS Authentication failed
javax.security.auth.login.LoginException: No LoginModules configured for pgjdbc

jaasAplicationName property in Driver properties is not set. If I change it, for example, to "123", then error changes to

GSS Authentication failed
javax.security.auth.login.LoginException: No LoginModules configured for 123

Where should I create "pgjdbc" or "123" for DBeaver to understand what I want?

 

I know the problem is in jdbc driver. BUT we have it working on our prod servers.

We have a file, which has this in it:

 

pgjdbc {

com.sun.security.auth.module.Krb5LoginModule required

doNotPrompt=true

useTicketCache=true

renewTGT=true

debug=true

client=true;

};

 

and everything works!

 

 

I am unclear. Do you have this working or not ?

 

Dave 

 


Attachment

pgsql-jdbc by date:

Previous
From: Лёсин Евгений Андреевич
Date:
Subject: Re: [JDBC] Error while connecting postgres db with Kerberos autentification
Next
From: Michael Paquier
Date:
Subject: Re: [JDBC] [HACKERS] Channel binding support for SCRAM-SHA-256