[22515] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Looking up Kerberos error codes

daemon@ATHENA.MIT.EDU (Jelmer Vernooij)
Mon Sep 20 20:21:35 2004

Date: Tue, 21 Sep 2004 00:53:14 +0200
From: Jelmer Vernooij <jelmer@vernstok.nl>
To: Jeffrey Hutzelman <jhutz@cmu.edu>
Message-ID: <20040920225314.GA5113@rhonwyn.lan.vernstok.nl>
Mime-Version: 1.0
In-Reply-To: <313520000.1095719719@minbar.fac.cs.cmu.edu>
cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============77126868673143556=="
Errors-To: kerberos-bounces@mit.edu


--===============77126868673143556==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="8t9RHnE3ZwKMSgU+"
Content-Disposition: inline


--8t9RHnE3ZwKMSgU+
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

On Mon, Sep 20, 2004 at 06:35:19PM -0400, Jeffrey Hutzelman wrote about 'Re=
: Looking up Kerberos error codes':


> On Monday, September 20, 2004 21:42:21 +0000 Jelmer Vernooij=20
> <jelmer@vernstok.nl> wrote:

> >Hi,

> >Trying to get krb5 authentication working together with PostgreSQL, I
> >stumbled across a couple of error codes that I can't place.

> >The PostgreSQL error logs report that krb5_recvauth returns error
> >'103' when connecting from one host and '13' when connecting from
> >another, but I haven't been able to figure out what those two error
> >codes mean.

> >Where can I lookup these error codes? KRB5PLACEHOLD_103 was the only
> >one with value 103 I could find, but it isn't used anywhere in MIT
> >Kerberos 1.3.4.

> >Any ideas on how to debug these kinds of problems?
> These sound like system-specific error codes, rather than those generated=
=20
> by Kerberos.  13 is a common value for EACCES; 103 is going to be more=20
> platform-dependent.
Thank you! After your message, I was able to fix the issue within=20
a few minutes (krb5.keytab was not owned by the postgresql user). I
had been looking at the wrong place all the time.

I'm not sure what the problem of the other host is (
strerror(103) gives me "Connection aborted by software") but I'm sure
I'll be able to work that out now that I know where to look.

Thanks once again,

Jelmer Vernooij

--8t9RHnE3ZwKMSgU+
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBT19aPa9Uoh7vUnYRAscWAKCZiS4OGzSUZbOAB2uVkei4JCmslQCeNI09
QVLcTo0hbqrtZlZbaD3aLT0=
=9LlC
-----END PGP SIGNATURE-----

--8t9RHnE3ZwKMSgU+--

--===============77126868673143556==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--===============77126868673143556==--

home help back first fref pref prev next nref lref last post