I'm also seeing the following KDC error in the System log:
'The account POSTGRES did not have a suitable key for generating a
Kerberos ticket.
If the encryption type is supported,
changing or setting the password will generate a proper key.'
I used the following cmd to create the krb5.keytab
'ktpass princ POSTGRES/host.domain.com@DOMAIN.COM -mapuser POSTGRES -pass *
-out krb5.keytab -ptype KRB5_NT_PRINCIPAL -crypto DES-CBC-MD5'
Eric Montague wrote:
> I'm trying to setup Kerberos authentication with PG on Windows 2000.
>
> I have installed the MIT Kerberos Windows dlls into the PG bin directory
> - replacing the krb5_32.dll and comerr32.dll from the PG install.
> I did this because the PG install did not have the krbcc32.dll,
> which is needed to find the credentials cache on Windows.
>
> The name of the service is 'POSTGRES', as is the name of the user
> who starts the service.
>
> I've created the krb5.keytab, and set its location in postgresql.conf,
> and set
> krb_srvname = 'POSTGRES'
> krb_server_hostname = 'host.domain.com' (the host machine)
>
> I've set pg_hba.conf to use krb5 for my username.
>
> When I try to connect with psql, I get the following error in the cmd
> window:
> 'krb5_sendauth: Bad application version was sent (via sendauth)'
> and the following msg in the pg_log
> 'authentication LOG: Kerberos recvauth returned error -1765328179'
>
> I found a thread in the mailing list regarding a problem with
> the kerberos authenication on windows in the 8.1beta2 version of PG.
> Kerberos brokenness and oops question in 8.1beta2
> http://archives.postgresql.org/pgsql-hackers/2005-10/msg00376.php
> Is this related to the error I'm getting?
>
> Thanks.
>
>
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 5: don't forget to increase your free space map settings
>