Hi Willy and Raghu, I rebuild from source code with kerberos/gssapi support, and changed to use 'gss' authentication method, it works now :)! Thanks very much for your kindly help. Regards, Yandong From: raghu ram <raghuchennuru@xxxxxxxxx<mailto:raghuchennuru@xxxxxxxxx>> Date: Thu, 24 Mar 2011 11:09:33 -0400 To: Willy-Bas Loos <willybas@xxxxxxxxx<mailto:willybas@xxxxxxxxx>> Cc: bjcoe <Yandong.Yao@xxxxxxx<mailto:Yandong.Yao@xxxxxxx>>, "pgsql-admin@xxxxxxxxxxxxxx<mailto:pgsql-admin@xxxxxxxxxxxxxx>" <pgsql-admin@xxxxxxxxxxxxxx<mailto:pgsql-admin@xxxxxxxxxxxxxx>>, "pgsql-general@xxxxxxxxxxxxxx<mailto:pgsql-general@xxxxxxxxxxxxxx>" <pgsql-general@xxxxxxxxxxxxxx<mailto:pgsql-general@xxxxxxxxxxxxxx>> Subject: Re: What does error "psql: Kerberos 5 authentication not supported" means? On Thu, Mar 24, 2011 at 6:49 PM, Willy-Bas Loos <willybas@xxxxxxxxx<mailto:willybas@xxxxxxxxx>> wrote: BTW, is there a way to find out what particular configure options were used for any given (binary) installation? The pg_config utility prints configuration parameters of the currently installed version of PostgreSQL --configure Print the options that were given to the configure script when PostgreSQL was configured for building. This can be used to reproduce the identical configuration, or to find out with what options a binary package was built. --Raghu Ram WBL On Thu, Mar 24, 2011 at 2:11 PM, Willy-Bas Loos <willybas@xxxxxxxxx<mailto:willybas@xxxxxxxxx>> wrote: Hi, I'm not quite sure but it probably means that postgresql was not built with kerberos 5 support. That would make sense if you are using a binary install (did not compile from source), because of the notice at http://www.postgresql.org/docs/9.0/interactive/auth-methods.html#KERBEROS-AUTH "Note: Native Kerberos authentication has been deprecated and should be used only for backward compatibility. New and upgraded installations are encouraged to use the industry-standard GSSAPI authentication method (see Section 19.3.3) instead." hth, WBL On Wed, Mar 23, 2011 at 5:44 PM, <Yandong.Yao@xxxxxxx<mailto:Yandong.Yao@xxxxxxx>> wrote: Hi Guys, I tried to setup kerberos authentication with postgresql 8.4.7 on Ubuntu 10.10. When I use: $ psql –h ubuntu.server –U gavin dbname I get following error: psql: Kerberos 5 authentication not supported. And from the server side of postgresql, I could see following log: 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:17 PDT DEBUG: 00000: exit(0) 2011-03-23 09:14:17 PDT LOCATION: proc_exit, ipc.c:135 2011-03-23 09:14:17 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make 2011-03-23 09:14:17 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:17 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make 2011-03-23 09:14:17 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:17 PDT DEBUG: 00000: reaping dead processes 2011-03-23 09:14:17 PDT LOCATION: reaper, postmaster.c:2243 2011-03-23 09:14:17 PDT DEBUG: 00000: server process (PID 4592) exited with exit code 0 2011-03-23 09:14:17 PDT LOCATION: LogChildExit, postmaster.c:2725 2011-03-23 09:14:24 PDT LOG: 00000: Kerberos recvauth returned error 103 2011-03-23 09:14:24 PDT LOCATION: pg_krb5_recvauth, auth.c:721 postgres: Software caused connection abort from krb5_recvauth 2011-03-23 09:14:24 PDT FATAL: 28000: Kerberos 5 authentication failed for user "gavin" 2011-03-23 09:14:24 PDT LOCATION: auth_failed, auth.c:273 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(1): 1 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:24 PDT DEBUG: 00000: exit(1) 2011-03-23 09:14:24 PDT LOCATION: proc_exit, ipc.c:135 2011-03-23 09:14:24 PDT DEBUG: 00000: shmem_exit(-1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: shmem_exit, ipc.c:211 2011-03-23 09:14:24 PDT DEBUG: 00000: proc_exit(-1): 0 callbacks to make 2011-03-23 09:14:24 PDT LOCATION: proc_exit_prepare, ipc.c:183 2011-03-23 09:14:24 PDT DEBUG: 00000: reaping dead processes What does this means and how could I get more verbose logs? Besides, is there any more howto/doc on integrate kerberos and postgresql besides the official documentation at http://www.postgresql.org/docs/9.0/interactive/client-authentication.html? Thanks very much in advance! Regards, Yandong -- Sent via pgsql-admin mailing list (pgsql-admin@xxxxxxxxxxxxxx<mailto:pgsql-admin@xxxxxxxxxxxxxx>) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin -- "Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw -- "Patriotism is the conviction that your country is superior to all others because you were born in it." -- George Bernard Shaw -- Sent via pgsql-admin mailing list (pgsql-admin@xxxxxxxxxxxxxx) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin
