Re: GSSAPI Authentication Problem

(2012/08/07 1:02), John Slattery wrote:
> On Sat, Aug 4, 2012 at 3:50 AM, Hiroshi Inoue <inoue@tpf.co.jp> wrote:
>> Hi John,
>>
>>
>> (2012/08/03 21:31), John Slattery wrote:
>>>
>>> Hi,
>>>
>>> I would like to report what seems like a problem with the driver. It
>>> doesn't seem possible to override the default user name for
>>> authentication by GSSAPI. I'm using a map in pg_ident.conf since my
>>> Active Directory user name isn't the same as my Postgresql user name.
>>> pgAdmin III and psql allow for this, the former by setting Username in
>>> the GUI to my Postgresql user name and the latter by specifying the -U
>>> option. I tried setting UID in the connection string I am using to my
>>> Postgresql user name but that caused the driver to return the
>>> following exception:
>>>
>>> Run-time error '-2147217843 <tel:2147217843> (800040e4d)':
>>>
>>> Service negotiation failed;
>>> The specified target is unknown or unreachable in
>>> DoKerberosEtcProcessAuthentication:PerformKerberosEtcClientHandSh
>>
>>
>> How do you login to your Kerberos system?
>>
>> regards,
>> Hiroshi Inoue
>>
>
> Hiroshi,
>
> I'm not sure I understand your question, but I'll take a shot at
> answering it. The client is Windows XP, so I would say I'm using the
> standard/default Windows GINA for Winlogon.

OK I'd like to confirm SSPI is used.
Could you try to set SSLMODE to 'allow' with the user name John?

regards,
Hiroshi Inoue