Re: Use of NT-ENTERPRISE name type via GSS-API

2014-07-04 Thread Alan Braggins
On 03/07/14 19:38, Greg Hudson wrote: > On 07/02/2014 05:36 AM, Alan Braggins wrote: >> I'm using Kerberos constrained delegation (s4u2proxy) >> for a proxy server that is authenticating clients to a >> Microsoft Active Domain server. > > Can you explain more about what you're doing? I'm not immed

Kerberos authentication to cluster

2014-07-04 Thread jarek
Hello! I have two servers (s1, s2) working as hot-standby cluster with virtual ip address (s3), which is assigned to current master. I have created host/s3 user in kadmin and added it to keytabs on both servers, but when I'm trying to authenticate to s3, I see: duplicate GSS authentication reques

Kerberos authentication in cluster

2014-07-04 Thread Jarosław Tabor
Hello! I have hot-standby cluster with two servers: s1 and s2. This cluster has also virtual ip address s3, assigned to current master. I can authenticate in s1 and s2 (postgres, gss) but when I'm trying to authenticate in s3, I see: duplicate GSS authentication request I have cr