Hi,
GSS authentication is working for users with small number of AD groups but getting below error when a user has larger number of groups. I believe it might to token size related, but they don’t have issues when authenticating with Kerberos/GSS to other applications, only with Postgres.
failed: GSSAPI context establishment error: The routine must be called again to complete its function: Unknown error
Is this a hard limit or can this be configurable?
Also, what is the best way to debug this as the postgresql.log does not have anything useful. Running on Alma Linux 9
Thanks,
Chris
This email and any attachments should not be construed as an offer or recommendation to sell or buy or a solicitation of an offer to sell or buy any specific security, fund or instrument or to participate in any particular investment strategy. The information contained herein is given as of a certain date and does not purport to give information as of any other date. Although the information presented herein has been obtained from sources we believe to be reliable, no representation or warranty, expressed or implied, is made as to the accuracy or completeness of that information. Past performance is not indicative of future results.
CONFIDENTIALITY NOTICE: This message and any attachment are confidential. If you are not the intended recipient, please telephone or email the sender and delete this message and any attachment from your system. If you are not the intended recipient you must not copy this message or attachment or disclose the contents to any other persons.
Balyasny Asset Management (UK) LLP is authorised and regulated by the Financial Conduct Authority in the UK. Balyasny Asset Management LP is registered as an Investment Advisor with the Securities and Exchange Commission in the USA.
BAM prohibits all personnel from having any business related communications over text message or other unapproved communication applications. Unless pre-approved, BAM employees are only permitted to communicate over email, Bloomberg and BAM telephone lines.
