I am having some trouble transitioning from a pam_krb5 setup to native Kerberos 5.
What is the meaning of the following error: 2007-01-24 14:42:35 [3780] LOG: connection received: host=216.229.91.242 port=4744 2007-01-24 14:42:35 [3780] LOG: Kerberos recvauth returned error -1765328240 postgres: Wrong principal in request from krb5_recvauth 2007-01-24 14:42:35 [3780] FATAL: Kerberos5 authentication failed for user "nemesis" - I have enabled krb_server_keyfile = '/etc/postgresql/krb5.keytab' - I exported the keys for both host/host.domain and postgres/host.domain principals into that keytab - The keytab is 640 root:postgres This is postgres 7.4 but I tried 8.1 with no improvement. The user account does exist and he can login if I use pam_krb5 instead of native krb5. With native krb5, the client can not log in with or without a TGT. I tried stracing the postmaster process and it opens the krb5.conf file, but does not appear to ever connect to the KDC before returning the error to the client: $ psql -h db -l psql: Kerberos 5 authentication failed Any ideas? -- Ryan Underwood, <[EMAIL PROTECTED]>
signature.asc
Description: Digital signature