Package: postgresql-client-common
Version: 80
Severity: normal
File: /usr/bin/psql

Hi,

I'm filing this on the package providing /usr/bin/psql, since that's
where I first noticed this happening. However, I guess this is somewhere
else -- it's just that I didn't bother to find out, since I don't think
this bug is hard to track for someone familiar with the source. If that
assumption is wrong, kick me.

Anyway, the following typescript says it all:

Script started on ma 22 okt 2007 16:24:13 CEST
[EMAIL PROTECTED]: [EMAIL PROTECTED]:~$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: [EMAIL PROTECTED]

Valid starting     Expires            Service principal
10/22/07 16:24:10  10/23/07 02:24:10  krbtgt/[EMAIL PROTECTED]
        renew until 10/23/07 16:24:06


Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached
[EMAIL PROTECTED]: [EMAIL PROTECTED]:~$ psql -l
psql: FATAL:  Ident authentication failed for user "wouter"
[EMAIL PROTECTED]: [EMAIL PROTECTED]:~$ exit

Script done on ma 22 okt 2007 16:24:19 CEST

In case you're not familiar with Kerberos: the "klist" output gives me
an overview of my kerberos authentication tokens; the line "Default
principal" contains my kerberos principal name and my realm, separated
by an '@' sign.

The authentication system used by postgresql somehow picks this up and
runs with it, even though I didn't set up any kerberos-based
authentication in postgresql (and, well, the kerberos username is just
*wrong* if I'm trying to do ident authentication).

-- System Information:
Debian Release: lenny/sid
Architecture: powerpc (ppc)

Kernel: Linux 2.6.22-2-powerpc
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages postgresql-client-common depends on:
ii  debconf [debconf-2.0]         1.5.15     Debian configuration management sy

postgresql-client-common recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to