Fwd: psql+krb5

--0016e6d784ee7840540479919ac2
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: quoted-printable

---------- Forwarded message ----------
From: rahimeh khodadadi
Date: 2009/11/29
Subject: Re: psql+krb5
To: Denis Feklushkin


These items have added after my sending.

I repeat again my configurations:


*
1) The configuration of krb5.conf is:
[realms]
EXAMPLE.COM =3D{

kdc=3Dstar :88
admin_server=3Dstar:749
default_domain=3D example.com
}
......*

2) Then, I created principal as* " postgres/star@EXAMPLE.COM "* and its
password is saved in* '/usr/local/pgsql/data/postgresql.keytab' .*


(star is localhost IP, but in hosts.conf I configure like: 213.233.169.93
star)

3) I setup *postgresql.conf *as below:

krb_server_keyfile =3D '/usr/local/pgsql/data/
postgresql.keytab'
krb_srvname =3D 'postgres/star@EXAMPLE.COM'

krb_server_hostname =3D 'star' # empty string matches any keytab en=
try
krb_caseins_users =3D off

4) I *create user "frank"* in Psql .

5) Then I set up* hba.conf :*

host all all 0.0.0.0/0 krb5
host all all 127.0.0.1/32 krb5


When I want to connect to Postgresql, it gives error.

# *kinit frank*

[root@star bin]# *./psql -h star -U frank -d test*

psql: *krb5_sendauth: Bad application version was sent (via sendauth)*

I should mention that * both postgresql server and krb-server are in same
system* and* my IP is acquring from dhcp server of university*. Where is
wrong.

2009/11/29 Denis Feklushkin

> On Sun, 29 Nov 2009 14:23:52 +0330
> rahimeh khodadadi wrote:
>
> > Thanks for your replying. My detail of configuration is:
> >
> > I try to setup kerberos authentication in Postgresql 8.1.18 on centos.
> >
> > But I have some problem.
> >
> > 1) The configuration of krb5.conf is:
> > [realms]
> > EXAMPLE.COM > > > =3D{
> >
> > kdc=3Dstar :88
> > admin_server=3Dstar:749
> > default_domain=3D example.com > > >
> > > >
> > > }
> > > .....
> > >
> > > 2) Then, I created principal as " postgres/star@EXAMPLE.COM > > > star@EXAMPLE.COM> " and its password is saved in
> > > '/usr/local/pgsql/data/postgresql.keytab' .
> > >
> > >
> > > (star is localhost IP, but in hosts.conf I configure like:
> > > 213.233.169.93 star)
> > >
> > > 3) I setup postgresql.conf as below:
> > >
> > > krb_server_keyfile =3D '/usr/local/pgsql/data/
> > > postgresql.keytab'
> > > krb_srvname =3D 'postgres/star@EXAMPLE.COM'
> > >
> > > krb_server_hostname =3D 'star' # empty string matches any
> > > keytab entry
> > > krb_caseins_users =3D off
> > >
> > > 4) I create user "frank" in Psql .
> > >
> > > 5) Then I set up hba.conf :
> > >
> > > host all all 0.0.0.0/0
> > > krb5
> > > host all all 127.0.0.1/32
> > > krb5
> > >
> > >
> > > When I want to connect to Postgresql, it gives error.
> > >
> > > # kinit frank
> > >
> > > [root@star bin]# ./psql -h star -U frank -d test
> > >
> > > psql: krb5_sendauth: Bad application version was sent (via sendauth)
> > >
> >
> > some changes in users gives below error :
> > "[root@www bin]# ./psql -h 213.233.168.249 -U postgres
> > psql: Kerberos 5 authentication rejected: Wrong principal in
> > request"
> >
> >
> > > I should mention that both postgresql server and krb-server are in
> > > same system and my IP is acquring from dhcp server of university.
> > > Where is wrong.
> > >
> >
> >
> >
> > 2009/11/29 Denis Feklushkin
> >
> > > On Sun, 29 Nov 2009 10:48:30 +0330
> > > rahimeh khodadadi wrote:
> > >
> > > > Hi,
> > > >
> > > > When I want to connect to psql via krb5 in Linux, it gives me
> > > > error like: "[root@www bin]# ./psql -h 213.233.168.249 -U
> > > > postgres psql: Kerberos 5 authentication rejected: Wrong
> > > > principal in request"
> > >
> > > þÔ=CF =D7 ÌÏÇÁ=C8 KDC?
> ^^^^^^^^^^^^^^^^ !!!
>
> =E9 ÅÝ=A3, =D7 ÔÅËÓÔÅ ËÏÔÏÒÙ=CA ÷Ù ÄÁ=
ÌÉ ×ÓÔÒÅÞÁÀÔÓ=D1 ÐÒÏÂÅÌ=D9 =D7 ÉÍ=
ÅÎÁÈ
> ÐÒÉÎÃÉÐÁÌÏ=D7 =C9 ÓÔÒÁÎÎÙÅ ÚÁ=D0=
ÉÓ=C9 ""
>
> ðÒ=C9 ÎÁÓÔÒÏÊË=C5 ×ÁÖÎ=CF ÞÔÏÂ=D9 =CE=
ÉÞÅÇ=CF ÜÔÏÇ=CF ÎÅÂÙÌÏ
>



--=20
With Best Regards
Miss.KHodadadi



--=20
With Best Regards
Miss.KHodadadi

--0016e6d784ee7840540479919ac2
Content-Type: text/html; charset=KOI8-R
Content-Transfer-Encoding: quoted-printable