Обсуждение: GSSAPI v9.01

Поиск
Список
Период
Сортировка

GSSAPI v9.01

От
dx k9
Дата:

Hi All,
I'm getting an error when trying to log into a database with gss( 1st time trying, see command below ).   My postgres user name is bob and my system name is also bob to log into the SLES 9 or SLES 11 box.  Although the active directory name is bob@domain.com    So, I'm not using pg_ident (user name maps) .     Do I need to configure --wtih-kerberos, see way below in my configure command below.  Maybe, both kerberos and gssapi are needed for gssapi, see configure command below.
 
Section 19.3.3 talks about  include_realm, map and krb_realm but I'm not seeing those option in pg_hba.  Is it referring to the krb5.conf file?  
 
Thanks for any help,
~DjK
 
 
 
Version 9.01
 
psql -h server -U bob
psql: GSSAPI continuation error: Unspecified GSS failure.  Minor code may provide more information
GSSAPI continuation error: Server not found in Kerberos database
 
 
# Trying different combinations here
# Kerberos and GSSAPI
#krb_server_keyfile = ''
krb_server_keyfile = '/tmp/'
krb_srvname = 'postgres'                # (Kerberos only)
#krb_srvname = 'AD.DOMAIN.COM'          # (Kerberos only)
#krb_caseins_users = off
krb_caseins_users = on

 

  $ ./configure --prefix=/usr/local/pgsql.v901 --with-includes=/usr/local/include:/usr/local/ssl/include:/usr/local/krb/include:/usr/local/python-2.5.2/include --with-libraries=/usr/local/lib:/usr/local/ssl/lib:/usr/local/krb/lib:/usr/local/python-2.5.2/lib  --with-perl --with-gssapi --with-python --with-openssl --with-libxml --enable-thread-safety