BTW, is there a way to find out what particular configure options were used for any given (binary) installation?
WBL On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willy...@gmail.com> wrote: > Hi, > > I'm not quite sure but it probably means that postgresql was not built with > kerberos 5 support. > That would make sense if you are using a binary install (did not compile > from source), because of the notice at > http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH > "Note: Native Kerberos authentication has been deprecated and should be > used only for backward compatibility. New and upgraded installations are > encouraged to use the industry-standard GSSAPI authentication method (see > Section 19.3.3) instead." > > hth, > > WBL > > > On Wed, Mar 23, 2011 at 5:44 PM, <yandong....@emc.com> wrote: > >> Hi Guys, >> >> I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu >> 10.10. >> >> When I use: >> $ psql –h ubuntu.server –U gavin dbname >> >> I get following error: >> psql: Kerberos 5 authentication not supported. >> >> And from the server side of postgresql, I could see following log: >> >> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 >> 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0) >> 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135 >> 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make >> 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211 >> 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make >> 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 >> 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes >> 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243 >> 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited >> with exit code 0 >> 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725 >> 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103 >> 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721 >> postgres: Software caused connection abort from krb5_recvauth >> 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed >> for user "gavin" >> 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273 >> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make >> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 >> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make >> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 >> 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1) >> 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135 >> 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make >> 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 >> 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make >> 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 >> 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes >> >> What does this means and how could I get more verbose logs? >> >> Besides, is there any more howto/doc on integrate kerberos and postgresql >> besides the official documentation at >> http://www.postgresql.org/docs/9.0/interactive/client-authentication.html >> ? >> >> >> Thanks very much in advance! >> >> Regards, >> Yandong >> >> >> >> -- >> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) >> To make changes to your subscription: >> http://www.postgresql.org/mailpref/pgsql-admin >> > > > > -- > "Patriotism is the conviction that your country is superior to all others > because you were born in it." -- George Bernard Shaw > -- "Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw
