I am having some trouble transitioning from a pam_krb5 setup to native
Kerberos 5.
What is the meaning of the following error:
2007-01-24 14:42:35 [3780] LOG: connection received: host=216.229.91.242 port=4744
2007-01-24 14:42:35 [3780] LOG: Kerberos recvauth returned error -1765328240
postgres: Wrong principal in request from krb5_recvauth
2007-01-24 14:42:35 [3780] FATAL: Kerberos5 authentication failed for
user "nemesis"
- I have enabled krb_server_keyfile = '/etc/postgresql/krb5.keytab'
- I exported the keys for both host/host.domain and postgres/host.domain principals into that keytab
- The keytab is 640 root:postgres
This is postgres 7.4 but I tried 8.1 with no improvement.
The user account does exist and he can login if I use pam_krb5 instead
of native krb5. With native krb5, the client can not log in with or
without a TGT.
I tried stracing the postmaster process and it opens the krb5.conf file,
but does not appear to ever connect to the KDC before returning the
error to the client:
$ psql -h db -l
psql: Kerberos 5 authentication failed
Any ideas?
--
Ryan Underwood, <nemesis@icequake.net>