Обсуждение: GSSAPI v9.01
Hi All,
I'm getting an error when trying to log into a database with gss( 1st time trying, see command below ). My postgres user name is bob and my system name is also bob to log into the SLES 9 or SLES 11 box. Although the active directory name is bob@domain.com So, I'm not using pg_ident (user name maps) . Do I need to configure --wtih-kerberos, see way below in my configure command below. Maybe, both kerberos and gssapi are needed for gssapi, see configure command below.
Section 19.3.3 talks about include_realm, map and krb_realm but I'm not seeing those option in pg_hba. Is it referring to the krb5.conf file?
Thanks for any help,
~DjK
Version 9.01
psql -h server -U bob
psql: GSSAPI continuation error: Unspecified GSS failure. Minor code may provide more information
GSSAPI continuation error: Server not found in Kerberos database
# Trying different combinations here
# Kerberos and GSSAPI
#krb_server_keyfile = ''
krb_server_keyfile = '/tmp/'
krb_srvname = 'postgres' # (Kerberos only)
#krb_srvname = 'AD.DOMAIN.COM' # (Kerberos only)
#krb_caseins_users = off
krb_caseins_users = on
$ ./configure --prefix=/usr/local/pgsql.v901 --with-includes=/usr/local/include:/usr/local/ssl/include:/usr/local/krb/include:/usr/local/python-2.5.2/include --with-libraries=/usr/local/lib:/usr/local/ssl/lib:/usr/local/krb/lib:/usr/local/python-2.5.2/lib --with-perl --with-gssapi --with-python --with-openssl --with-libxml --enable-thread-safety