Re: GSSAPI/KRB5 and JDBC (again) - Mailing list pgsql-jdbc

From Kris Jurka
Subject Re: GSSAPI/KRB5 and JDBC (again)
Date
Msg-id Pine.BSO.4.64.0807290027090.2814@leary.csoft.net
Whole thread Raw
In response to Re: GSSAPI/KRB5 and JDBC (again)  ("Peter Koczan" <pjkoczan@gmail.com>)
Responses Re: GSSAPI/KRB5 and JDBC (again)
List pgsql-jdbc

On Fri, 25 Jul 2008, Peter Koczan wrote:

> I tried kinit, and it didn't work, but putting my real Kerberos
> password in the password field worked. It looks like it's trying to
> get a new set of credentials/tickets when authenticating, instead of
> using stashed or readily available credentials.

It tries to use the provided password only if it doesn't find an existing
set of credentials.  It definitely works for me without a password after
kinit(ing).  Perhaps your ticket cache or keytab is in a non-standard
place?  This is the first and only time I've setup a kerberos server, so I
may have done something unusual on my end too, but I basically just did a
stock Debian install.  Perhaps you need some additional options from here
in your login.conf to let it know things particular to your setup?

http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/spec/com/sun/security/auth/module/Krb5LoginModule.html

Kris Jurka

pgsql-jdbc by date:

Previous
From: Kris Jurka
Date:
Subject: Re: Timestamp Problems
Next
From: "Peter"
Date:
Subject: Re: numeric type