Subject: server fails to open krb5.keytab in /usr/etc/postgresql
Package: postgresql
Version: 7.4.7-6sarge1
Severity: normal
*** Please type your report below this line ***
enabling krb5 auth in the sarge package is difficult; when a client connects
using kerberos auth, strace shows that the postgresql server process is trying
to:
open("/usr/etc/postgresql/krb5.keytab", O_RDONLY) = -1 ENOENT (No such fil
e or directory)
A workaround is to # ln -s /etc /usr, or don't use the compiled in defaults by
setting
krb_server_keyfile = '/etc/postgresql/krb5.keytab'
in /etc/postgresql/postgresql.conf. Also, it tries to open other files in
/usr/etc/, possibly indicating that some of the build paths given to
./configure could use tweaking:
open("/usr/etc/krb5.conf", O_RDONLY) = 3
FYI, the postgres.log shows:
2005-07-05 17:48:03 [22606] LOG: Kerberos recvauth returned error 2
postgres: No such file or directory from krb5_recvauth
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (300, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11-1-k7
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages postgresql depends on:
ii adduser 3.63 Add and remove users and groups
ii debconf [debconf 1.4.30.13 Debian configuration management sy
ii debianutils 2.8.4 Miscellaneous utilities specific t
ii dpkg 1.10.28 Package maintenance system for Deb
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an
ii libcomerr2 1.37-2sarge1 common error description library
ii libkrb53 1.3.6-2 MIT Kerberos runtime libraries
ii libpam0g 0.76-22 Pluggable Authentication Modules l
ii libperl5.8 5.8.4-8 Shared Perl library
ii libpq3 7.4.7-6sarge1 PostgreSQL C client library
ii libreadline4 4.3-11 GNU readline and history libraries
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
ii mailx 1:8.1.2-0.20040524cvs-4 A simple mail user agent
ii postgresql-clien 7.4.7-6sarge1 front-end programs for PostgreSQL
ii procps 1:3.2.1-2 The /proc file system utilities
ii python2.3 2.3.5-3 An interactive high-level object-o
ii ucf 1.17 Update Configuration File: preserv
ii zlib1g 1:1.2.2-4 compression library - runtime
-- debconf information:
postgresql/upgrade/preserve_location: /var/lib/preserve
* postgresql/settings/day_month_order: European
postgresql/convert-postmaster.init: true
* postgresql/upgrade/policy: false
postgresql/enable_lang: true
postgresql/contains_POSTGRESHOME: true
postgresql/very_old_version_warning: true
postgresql/upgrade/dump_location: /var/lib
postgresql/convert-pg_hba.conf: true
* postgresql/initdb/location:
* shared/postgresql/upgrade74: false
postgresql/settings/locale: C
postgresql/peer-to-ident: true
postgresql/missing_conf: true
* postgresql/purge_data_too: false
* postgresql/settings/encoding: SQL_ASCII
* postgresql/settings/date_style: ISO
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
