> I'm trying to setup Kerberos authentication with PG on Windows 2000.
>
> I have installed the MIT Kerberos Windows dlls into the PG
> bin directory
> - replacing the krb5_32.dll and comerr32.dll from the PG install.
> I did this because the PG install did not have the
> krbcc32.dll, which is needed to find the credentials cache on Windows.
>
> The name of the service is 'POSTGRES', as is the name of the
> user who starts the service.
>
> I've created the krb5.keytab, and set its location in
> postgresql.conf, and set krb_srvname = 'POSTGRES'
> krb_server_hostname = 'host.domain.com' (the host machine)
>
> I've set pg_hba.conf to use krb5 for my username.
>
> When I try to connect with psql, I get the following error in the cmd
> window:
> 'krb5_sendauth: Bad application version was sent (via sendauth)'
> and the following msg in the pg_log
> 'authentication LOG: Kerberos recvauth returned error -1765328179'
>
Not sure if I've heard anybody successfully running a pg *server* on
windows with kerberos, but I ru nseveral pg serverson linux with clients
on windows, using kerberos and AD.
This error message looks a lot like the ones you'd get if you have an
incorrect service name on the client. Did you change the name on the
client as well, or just in postgresql.conf? (Your steps seems to
indicate only postgresql.conf). The easiest way is to set the
environment variable PGKRBSRVNAME=POSTGRES.
//Magnus