thanks for the response. you were right about setting the env variable.
that cleared up the 'bad appl version' error. subsequently, i got it to
the point where
the connection attempt just hung, and hitting <ctl>C at the psql prompt
caused a "stop batch process?" msg. I stopped at that point.
we are going to run PG on a linux machine, so running everything on
windows has become a mute point.
I was successful configuring PG on ubuntu linux to authenticate users on
windows using kerberos and Active Directory. Pavel's directions in the
user-commented PG docs were spot on.
if i get time, i might do some more work trying to get an all windows
kerberos
configuration working.
thanks again.
Magnus Hagander wrote:
I'm trying to setup Kerberos authentication with PG on Windows 2000.
I have installed the MIT Kerberos Windows dlls into the PG
bin directory
- replacing the krb5_32.dll and comerr32.dll from the PG install.
I did this because the PG install did not have the
krbcc32.dll, which is needed to find the credentials cache on Windows.
The name of the service is 'POSTGRES', as is the name of the
user who starts the service.
I've created the krb5.keytab, and set its location in
postgresql.conf, and set krb_srvname = 'POSTGRES'
krb_server_hostname = 'host.domain.com' (the host machine)
I've set pg_hba.conf to use krb5 for my username.
When I try to connect with psql, I get the following error in the cmd
window:
'krb5_sendauth: Bad application version was sent (via sendauth)'
and the following msg in the pg_log
'authentication LOG: Kerberos recvauth returned error -1765328179'
Not sure if I've heard anybody successfully running a pg *server* on
windows with kerberos, but I ru nseveral pg serverson linux with clients
on windows, using kerberos and AD.
This error message looks a lot like the ones you'd get if you have an
incorrect service name on the client. Did you change the name on the
client as well, or just in postgresql.conf? (Your steps seems to
indicate only postgresql.conf). The easiest way is to set the
environment variable PGKRBSRVNAME=POSTGRES.
//Magnus
---------------------------(end of broadcast)---------------------------
TIP 4: Have you searched our list archives?
http://archives.postgresql.org
