Thread: What does error "psql: Kerberos 5 authentication not supported" means?
Hi Guys, I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10. When I use: $ psql –h ubuntu.server –U gavin dbname I get following error: psql: Kerberos 5 authentication not supported. And from the server side of postgresql, I could see following log: 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0) 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721 postgres: Software caused connection abort from krb5_recvauth 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin" 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1) 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes What does this means and how could I get more verbose logs? Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html? Thanks very much in advance! Regards, Yandong
Re: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means?
From
Willy-Bas Loos
Date:
Hi,
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support.
That would make sense if you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH
"Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgraded installations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead."
hth,
WBL
On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com> wrote:
Hi Guys,
I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10.
When I use:
$ psql –h ubuntu.server –U gavin dbname
I get following error:
psql: Kerberos 5 authentication not supported.
And from the server side of postgresql, I could see following log:
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0
2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
postgres: Software caused connection abort from krb5_recvauth
2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin"
2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
What does this means and how could I get more verbose logs?
Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?
Thanks very much in advance!
Regards,
Yandong
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
Re: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means?
From
Willy-Bas Loos
Date:
BTW, is there a way to find out what particular configure options were used for any given (binary) installation?
WBL
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@gmail.com> wrote:
Hi,I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support.That would make sense if you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH"Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgraded installations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead."hth,WBL--On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com> wrote:Hi Guys,
I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10.
When I use:
$ psql –h ubuntu.server –U gavin dbname
I get following error:
psql: Kerberos 5 authentication not supported.
And from the server side of postgresql, I could see following log:
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0
2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
postgres: Software caused connection abort from krb5_recvauth
2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin"
2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
What does this means and how could I get more verbose logs?
Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?
Thanks very much in advance!
Regards,
Yandong
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
Re: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means?
From
Tom Lane
Date:
Willy-Bas Loos <willybas@gmail.com> writes: > BTW, is there a way to find out what particular configure options were used > for any given (binary) installation? Run pg_config. regards, tom lane
Re: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means?
From
raghu ram
Date:
On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos <willybas@gmail.com> wrote:
BTW, is there a way to find out what particular configure options were used for any given (binary) installation?
The pg_config utility prints configuration parameters of the currently installed version of PostgreSQL
--configure
Print the options that were given to the configure script when PostgreSQL was configured for building. This can be used to reproduce the identical configuration, or to find out with what options a binary package was built.
--Raghu Ram
WBLOn Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@gmail.com> wrote:Hi,I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support.That would make sense if you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH"Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgraded installations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead."hth,WBL--On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com> wrote:Hi Guys,
I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10.
When I use:
$ psql –h ubuntu.server –U gavin dbname
I get following error:
psql: Kerberos 5 authentication not supported.
And from the server side of postgresql, I could see following log:
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0)
2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes
2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243
2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0
2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725
2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103
2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721
postgres: Software caused connection abort from krb5_recvauth
2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin"
2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1)
2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135
2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211
2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make
2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183
2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes
What does this means and how could I get more verbose logs?
Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html?
Thanks very much in advance!
Regards,
Yandong
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
--
"Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
Hi Willy and Raghu, I rebuild from source code with kerberos/gssapi support, and changed to use 'gss' authentication method, it works now :)! Thanks very much for your kindly help. Regards, Yandong From: raghu ram <raghuchennuru@gmail.com<mailto:raghuchennuru@gmail.com>> Date: Thu, 24 Mar 2011 11:09:33 -0400 To: Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>> Cc: bjcoe <Yandong.Yao@EMC.COM<mailto:Yandong.Yao@EMC.COM>>, "pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>" <pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>>, "pgsql-general@postgresql.org<mailto:pgsql-general@postgresql.org>" <pgsql-general@postgresql.org<mailto:pgsql-general@postgresql.org>> Subject: Re: [ADMIN] What does error "psql: Kerberos 5 authentication not supported" means? On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>> wrote: BTW, is there a way to find out what particular configure options were used for any given (binary) installation? The pg_config utility prints configuration parameters of the currently installed version of PostgreSQL --configure Print the options that were given to the configure script when PostgreSQL was configured for building. This can be used toreproduce the identical configuration, or to find out with what options a binary package was built. --Raghu Ram WBL On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@gmail.com<mailto:willybas@gmail.com>> wrote: Hi, I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support. That would make sense if you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH "Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgradedinstallations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead." hth, WBL On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@emc.com<mailto:Yandong.Yao@emc.com>> wrote: Hi Guys, I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10. When I use: $ psql –h ubuntu.server –U gavin dbname I get following error: psql: Kerberos 5 authentication not supported. And from the server side of postgresql, I could see following log: 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0) 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721 postgres: Software caused connection abort from krb5_recvauth 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin" 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1) 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes What does this means and how could I get more verbose logs? Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html? Thanks very much in advance! Regards, Yandong -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org<mailto:pgsql-admin@postgresql.org>) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin -- "Patriotism is the conviction that your country is superior to all others because you were born in it." -- George BernardShaw -- "Patriotism is the conviction that your country is superior to all others because you were born in it." -- George BernardShaw