Обсуждение: Kerberos question
PGadmin 1.12.1 Windows 2008 R2 Domain trust between the Windows domain and the KRB realm hosting PG When I attempt to connect I get the dialog: Error connecting to the server: FATAL : GSSAPI authentication failed for user "blake" FATAL: GSSAPI authentication failed for user "blake" Kerberos is working (for putty, winscp, firefox, etc.) I'm sure it is something simple I'm missing in the pgadmin config Thanks Blake
On Wed, Dec 1, 2010 at 8:42 PM, Duffey, Blake A. <Blake.Duffey@noblis.org> wrote: > PGadmin 1.12.1 > Windows 2008 R2 > Domain trust between the Windows domain and the KRB realm hosting PG > > When I attempt to connect I get the dialog: > > Error connecting to the server: FATAL : GSSAPI authentication failed for > user "blake" > FATAL: GSSAPI authentication failed for user "blake" > > Kerberos is working (for putty, winscp, firefox, etc.) > > I'm sure it is something simple I'm missing in the pgadmin config We dropped MIT Kerberos from the PostgreSQL 9.0 installer builds, and thus the libpq used by pgAdmin because it's a) virtually impossible to build, b) MIT are slow to release fixes for security issues and c) we have SSPI support now. -- Dave Page Blog: http://pgsnake.blogspot.com Twitter: @pgsnake EnterpriseDB UK: http://www.enterprisedb.com The Enterprise PostgreSQL Company
On Wed, Dec 1, 2010 at 8:55 PM, Duffey, Blake A. <Blake.Duffey@noblis.org> wrote: > Dave, > I'm using SSPI Oh - I assumed from the GSSAPI error message that was what you were trying to use. Unfortunately though, I'm not really that familiar with either technology - we probably need Magnus to wade in. -- Dave Page Blog: http://pgsnake.blogspot.com Twitter: @pgsnake EnterpriseDB UK: http://www.enterprisedb.com The Enterprise PostgreSQL Company
Dave,I'm using SSPI -----Original Message----- From: Dave Page [mailto:dpage@pgadmin.org] Sent: Wednesday, December 01, 2010 3:52 PM To: Duffey, Blake A. Cc: pgadmin-support@postgresql.org Subject: Re: [pgadmin-support] Kerberos question On Wed, Dec 1, 2010 at 8:42 PM, Duffey, Blake A. <Blake.Duffey@noblis.org> wrote: > PGadmin 1.12.1 > Windows 2008 R2 > Domain trust between the Windows domain and the KRB realm hosting PG > > When I attempt to connect I get the dialog: > > Error connecting to the server: FATAL : GSSAPI authentication failed for > user "blake" > FATAL: GSSAPI authentication failed for user "blake" > > Kerberos is working (for putty, winscp, firefox, etc.) > > I'm sure it is something simple I'm missing in the pgadmin config We dropped MIT Kerberos from the PostgreSQL 9.0 installer builds, and thus the libpq used by pgAdmin because it's a) virtually impossible to build, b) MIT are slow to release fixes for security issues and c) we have SSPI support now. -- Dave Page Blog: http://pgsnake.blogspot.com Twitter: @pgsnake EnterpriseDB UK: http://www.enterprisedb.com The Enterprise PostgreSQL Company
Please disregard - I hadn't set the environment variables properly setx PGGSSLIB sspi /M setx PGKRBSRVNAME postgres /M Thanks Blake -----Original Message----- From: Dave Page [mailto:dpage@pgadmin.org] Sent: Wednesday, December 01, 2010 4:00 PM To: Duffey, Blake A. Cc: pgadmin-support@postgresql.org; Magnus Hagander Subject: Re: [pgadmin-support] Kerberos question On Wed, Dec 1, 2010 at 8:55 PM, Duffey, Blake A. <Blake.Duffey@noblis.org> wrote: > Dave, > I'm using SSPI Oh - I assumed from the GSSAPI error message that was what you were trying to use. Unfortunately though, I'm not really that familiar with either technology - we probably need Magnus to wade in. -- Dave Page Blog: http://pgsnake.blogspot.com Twitter: @pgsnake EnterpriseDB UK: http://www.enterprisedb.com The Enterprise PostgreSQL Company