Re: multiple Kerberos Server Principals from 1 instance of pgadmin
Ivan Novick <[email protected]> Fri, 16 Aug 2019 12:52:19 -0700
| Newsgroups | gmane.comp.db.postgresql.pgadmin |
|---|---|
| Message-ID | <CAPJXddaJUTQt2aZGcUjZd3AGK210zayCPif-qfJKn1_TMfwfkg@mail.gmail.com> |
Hi Stephen, For greenplum database it would be gpadmin instead of postgres > > PGKRBSRVNAME is typically either 'postgres' or 'POSTGRES', depending on > if you are dealing with Active Directory clients or not. I agree that > it's theoretically possible that you might need to be able to configure > PGKRBSRVNAME on a per-server/cluster basis, but you definitely don't > need to be able to do so on a per-database basis and the PGKRBSRVNAME > has absolutely nothing to do with the user's username, nor the unix user > that the server actually runs as. > > What, exactly, are you thinking that value would be set to? > > Can you show what klist -k /path/to/keytab on the PG server returns? > > You can see here a sample output that gpadmin is referenced. klist -k /var/spool/keytabs/gpadmin Keytab name: FILE:/var/spool/keytabs/gpadmin KVNO Timestamp Principal ---- ----------------- -------------------------------------------------------- 2 04/09/15 06:56:33 gpadmin/[email protected] 2 04/09/15 06:56:33 gpadmin/[email protected] 2 04/09/15 06:56:33 gpadmin/[email protected] 2 04/09/15 06:56:33 gpadmin/[email protected] What would help a lot is when setting up the Server properties in pgadmin4 if we could add a PGKRBSRVNAME variable so it can be different for each server. Does that make sense? If the idea makes sense and is agreed, i could probably find a developer that would be interested to help code it up and submit. Thanks! Ivan