Re: multiple Kerberos Server Principals from 1 instance of pgadmin

Stephen Frost <[email protected]> Thu, 15 Aug 2019 19:54:02 -0400

Newsgroups	gmane.comp.db.postgresql.pgadmin
Message-ID	<[email protected]>

Greetings,

* Ivan Novick ([email protected]) wrote:
> We have a user that is working with postgres and greenplum and they said
> that pgadmin4 only allows one Kerberos Server Principal per pgAdmin
> instance because it takes the value of the environment variable
> PGKRBSRVNAME. Kerberos Server Principal value is the name of the user
> running Greenplum or Postgres database.
> 
> The user is trying to connect to multiple databases and they have different
> user names in the installation like gpadmin. pgqa pgprod, etc. So they can
> not connect to both from one PGADMIN because the environment variable would
> need to be reset when starting pgadmin.

PGKRBSRVNAME is typically either 'postgres' or 'POSTGRES', depending on
if you are dealing with Active Directory clients or not.  I agree that
it's theoretically possible that you might need to be able to configure
PGKRBSRVNAME on a per-server/cluster basis, but you definitely don't
need to be able to do so on a per-database basis and the PGKRBSRVNAME
has absolutely nothing to do with the user's username, nor the unix user
that the server actually runs as.

What, exactly, are you thinking that value would be set to?

Can you show what klist -k /path/to/keytab on the PG server returns?

Thanks,

Stephen

signature.asc (application/pgp-signature, 819 B)