Re: BUG #9337: SSPI/GSSAPI with mismatched user names

* Brian Crowell (brian@fluggo.com) wrote:
> Right now, I'm seeing log entries like this:
>=20
>   2014-02-24 11:30:40 CST LOG:  provided user name (Brian) and
> authenticated user name (BCrowell@REALM.COM) do not match
>=20
> But the Kerberos ticket is perfectly valid, and matches a Postgres
> user. In this case, the program attempting to log in is incapable of
> determining the correct Postgres user name to send (see Npgsql bug for
> the dirty details), so why not just accept the Kerberos principal
> name?

This is what the mapping logic in pg_ident was written to address...

    Thanks,

        Stephen