Thread: Re: psql: krb5_sendauth: Bad application version was sent (via sendauth) - Windows 2000, MIT Kerberos, PG v 8.1.1
Re: psql: krb5_sendauth: Bad application version was sent (via sendauth) - Windows 2000, MIT Kerberos, PG v 8.1.1
From
"Magnus Hagander"
Date:
> I'm trying to setup Kerberos authentication with PG on Windows 2000. > > I have installed the MIT Kerberos Windows dlls into the PG > bin directory > - replacing the krb5_32.dll and comerr32.dll from the PG install. > I did this because the PG install did not have the > krbcc32.dll, which is needed to find the credentials cache on Windows. > > The name of the service is 'POSTGRES', as is the name of the > user who starts the service. > > I've created the krb5.keytab, and set its location in > postgresql.conf, and set krb_srvname = 'POSTGRES' > krb_server_hostname = 'host.domain.com' (the host machine) > > I've set pg_hba.conf to use krb5 for my username. > > When I try to connect with psql, I get the following error in the cmd > window: > 'krb5_sendauth: Bad application version was sent (via sendauth)' > and the following msg in the pg_log > 'authentication LOG: Kerberos recvauth returned error -1765328179' > Not sure if I've heard anybody successfully running a pg *server* on windows with kerberos, but I ru nseveral pg serverson linux with clients on windows, using kerberos and AD. This error message looks a lot like the ones you'd get if you have an incorrect service name on the client. Did you change the name on the client as well, or just in postgresql.conf? (Your steps seems to indicate only postgresql.conf). The easiest way is to set the environment variable PGKRBSRVNAME=POSTGRES. //Magnus
thanks for the response. you were right about setting the env variable. that cleared up the 'bad appl version' error. subsequently, i got it to the point where the connection attempt just hung, and hitting <ctl>C at the psql prompt caused a "stop batch process?" msg. I stopped at that point. we are going to run PG on a linux machine, so running everything on windows has become a mute point. I was successful configuring PG on ubuntu linux to authenticate users on windows using kerberos and Active Directory. Pavel's directions in the user-commented PG docs were spot on. if i get time, i might do some more work trying to get an all windows kerberos configuration working. thanks again. Magnus Hagander wrote: >> I'm trying to setup Kerberos authentication with PG on Windows 2000. >> >> I have installed the MIT Kerberos Windows dlls into the PG >> bin directory >> - replacing the krb5_32.dll and comerr32.dll from the PG install. >> I did this because the PG install did not have the >> krbcc32.dll, which is needed to find the credentials cache on Windows. >> >> The name of the service is 'POSTGRES', as is the name of the >> user who starts the service. >> >> I've created the krb5.keytab, and set its location in >> postgresql.conf, and set krb_srvname = 'POSTGRES' >> krb_server_hostname = 'host.domain.com' (the host machine) >> >> I've set pg_hba.conf to use krb5 for my username. >> >> When I try to connect with psql, I get the following error in the cmd >> window: >> 'krb5_sendauth: Bad application version was sent (via sendauth)' >> and the following msg in the pg_log >> 'authentication LOG: Kerberos recvauth returned error -1765328179' >> >> > > Not sure if I've heard anybody successfully running a pg *server* on > windows with kerberos, but I ru nseveral pg serverson linux with clients > on windows, using kerberos and AD. > > This error message looks a lot like the ones you'd get if you have an > incorrect service name on the client. Did you change the name on the > client as well, or just in postgresql.conf? (Your steps seems to > indicate only postgresql.conf). The easiest way is to set the > environment variable PGKRBSRVNAME=POSTGRES. > > //Magnus > > ---------------------------(end of broadcast)--------------------------- > TIP 4: Have you searched our list archives? > > http://archives.postgresql.org > >