Your message dated Thu, 25 Apr 2013 17:37:22 +0200
with message-id <[email protected]>
and subject line Can't reproduce this anymore
has caused the Debian Bug report #447604,
regarding kerberos tickets confuse postgres auth
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
447604: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447604
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: postgresql-client-common
Version: 80
Severity: normal
File: /usr/bin/psql
Hi,
I'm filing this on the package providing /usr/bin/psql, since that's
where I first noticed this happening. However, I guess this is somewhere
else -- it's just that I didn't bother to find out, since I don't think
this bug is hard to track for someone familiar with the source. If that
assumption is wrong, kick me.
Anyway, the following typescript says it all:
Script started on ma 22 okt 2007 16:24:13 CEST
anibal@country: anibal@country:~$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: [email protected]
Valid starting Expires Service principal
10/22/07 16:24:10 10/23/07 02:24:10 krbtgt/[email protected]
renew until 10/23/07 16:24:06
Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached
anibal@country: anibal@country:~$ psql -l
psql: FATAL: Ident authentication failed for user "wouter"
anibal@country: anibal@country:~$ exit
Script done on ma 22 okt 2007 16:24:19 CEST
In case you're not familiar with Kerberos: the "klist" output gives me
an overview of my kerberos authentication tokens; the line "Default
principal" contains my kerberos principal name and my realm, separated
by an '@' sign.
The authentication system used by postgresql somehow picks this up and
runs with it, even though I didn't set up any kerberos-based
authentication in postgresql (and, well, the kerberos username is just
*wrong* if I'm trying to do ident authentication).
-- System Information:
Debian Release: lenny/sid
Architecture: powerpc (ppc)
Kernel: Linux 2.6.22-2-powerpc
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages postgresql-client-common depends on:
ii debconf [debconf-2.0] 1.5.15 Debian configuration management sy
postgresql-client-common recommends no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
I can't reproduce this bug anymore with recent postgresql packages, so
closing.
--
Copyshops should do vouchers. So that next time some bureaucracy
requires you to mail a form in triplicate, you can mail it just once,
add a voucher, and save on postage.
--- End Message ---