thanks for the response. you were right about setting the env variable.
that cleared up the 'bad appl version' error. subsequently, i got it to
the point where
the connection attempt just hung, and hitting <ctl>C at the psql prompt
caused a "stop batch process?" msg. I stopped at that point.
we are going to run PG on a linux machine, so running everything on
windows has become a mute point.
I was successful configuring PG on ubuntu linux to authenticate users on
windows using kerberos and Active Directory. Pavel's directions in the
user-commented PG docs were spot on.
if i get time, i might do some more work trying to get an all windows
kerberos
configuration working.
thanks again.
Magnus Hagander wrote:
>> I'm trying to setup Kerberos authentication with PG on Windows 2000.
>>
>> I have installed the MIT Kerberos Windows dlls into the PG
>> bin directory
>> - replacing the krb5_32.dll and comerr32.dll from the PG install.
>> I did this because the PG install did not have the
>> krbcc32.dll, which is needed to find the credentials cache on Windows.
>>
>> The name of the service is 'POSTGRES', as is the name of the
>> user who starts the service.
>>
>> I've created the krb5.keytab, and set its location in
>> postgresql.conf, and set krb_srvname = 'POSTGRES'
>> krb_server_hostname = 'host.domain.com' (the host machine)
>>
>> I've set pg_hba.conf to use krb5 for my username.
>>
>> When I try to connect with psql, I get the following error in the cmd
>> window:
>> 'krb5_sendauth: Bad application version was sent (via sendauth)'
>> and the following msg in the pg_log
>> 'authentication LOG: Kerberos recvauth returned error -1765328179'
>>
>>
>
> Not sure if I've heard anybody successfully running a pg *server* on
> windows with kerberos, but I ru nseveral pg serverson linux with clients
> on windows, using kerberos and AD.
>
> This error message looks a lot like the ones you'd get if you have an
> incorrect service name on the client. Did you change the name on the
> client as well, or just in postgresql.conf? (Your steps seems to
> indicate only postgresql.conf). The easiest way is to set the
> environment variable PGKRBSRVNAME=POSTGRES.
>
> //Magnus
>
> ---------------------------(end of broadcast)---------------------------
> TIP 4: Have you searched our list archives?
>
> http://archives.postgresql.org
>
>