java - Error connecting to PostgreSQL 9.4 with MIT Kerberos via JDBC vs CLI -

-

i have set postgresql 9.4 mit kerberos 5 , can connect on cli using psql. after filing off fingerprints principal bgiles/postgres@realm, pg_hba.conf has

host                            0.0.0.0/0        gss include_realm=1 map=gss krb_realm=realm

and pg_ident.conf file has

gss     /^(.*)/postgres@realm$ \1

i created principal, saved keytab, , if 

$ kinit -k -t krb5.keytab bgiles/postgres

i can connect postgresql server 'kpg'. proves kerberos , keytab set properly.

$ psql -h kpg dbname (connection information...)

however when use same keytab connect via jdbc gss authentication error due postgresql refusing perform mapping.

2016-04-20 00:13:16 utc [18919-1] bgiles/postgres@bgiles log:  no match in usermap "gss" user "bgiles/postgres" authenticated "bgiles/postgres@realm" 2016-04-20 00:13:16 utc [18919-2] bgiles/postgres@bgiles fatal:  gssapi authentication failed user "bgiles/postgres" 2016-04-20 00:13:16 utc [18919-3] bgiles/postgres@bgiles detail:  connection matched pg_hba.conf line 100: "host            75.144.16.201/32    gss include_realm=1 map=gss krb_realm=realm"

(i noticed @bgiles , suspect key problem totally stumped it.)

the test code is

public class kerberospostgresqltest {      static {         url url = thread.currentthread().getcontextclassloader().getresource("jaas.conf");          system.setproperty("java.security.auth.login.config", url.toexternalform());         system.setproperty("java.security.krb5.realm", "realm");         system.setproperty("java.security.krb5.kdc", "kdc");     }      @test     public void test() throws exception {         string url = "jdbc:postgresql://kpg/bgiles";         string user = "bgiles/postgres";          properties conninfo = new properties();         conninfo.put("user", user);         conninfo.put("jaasapplicationname", "pgjdbc");          try (connection conn = drivermanager.getconnection(url, conninfo)) {          }     } }

and jaas configuration file is

pgjdbc {     com.sun.security.auth.module.krb5loginmodule required     refreshkrb5config=true     donotprompt=true     useticketcache=true     renewtgt=false     usekeytab=true     keytab="/tmp/krb5.keytab"     debug=true     client=true     principal="bgiles/postgres"     ;

};

the postgresql database recognizes valid kerberos connection attempt. it's balking @ final step maps kerberos principal postgresql user id. somehow java/jaas/jdbc code mangling , works on cli not work via jdbc.

i have used countless variants of boolean flags , adding or removing @realm , found many ways prevent gss authentication happening @ nothing lets me connect server.

any ideas? difference in java/jaas/jdbc code can't understand how can mangled principal that's still accepted kdc. tgt issues?

thanks,

bear


Comments

Post a Comment

Popular posts from this blog

java - nested exception is org.hibernate.exception.SQLGrammarException: could not extract ResultSet Hibernate+SpringMVC -

-
i trying fetch records database , having above error this classs appropriate getters , setters public class user { private int id; private string username; private string password; private string email; i have create database , inserted data below configuration <bean id="datasource" class="org.apache.commons.dbcp2.basicdatasource" destroy-method="close"> <property name="driverclassname" value="com.mysql.jdbc.driver"/> <property name="url" value="jdbc:mysql://localhost:3306/usersdb"/> <property name="username" value="root"/> <property name="password" value=""/> </bean> this complete stacktrace severe: servlet.service() servlet [appservlet] in context path [/spring] threw exception [request processing failed; nested exception org.hibernate.exception.sqlgrammarexception: not ...
Read more

sql - Postgresql tables exists, but getting "relation does not exist" when querying -

-
Image
i have postgresql db number of tables. if query: select column_name information_schema.columns table_name="my_table"; i list of columns returned properly. however, when query: select * "my_table"; i error: (programmingerror) relation "my_table" not exist 'select *\n "my_table"\n' {} any thoughts on why can columns, can't query table? goal able query table. you have include schema if isnt public one select * <schema>."my_table" or can change default schema show search_path; set search_path my_schema; check table schema here select * information_schema.columns for example if table on default schema public both works ok select * parroquias_region select * public.parroquias_region but sectors need specify schema select * map_update.sectores_point
Read more

asp.net mvc - breakpoint on javascript in CSHTML? -

-
i have .cshtml file has javascript tag. within script tag have few lines of javascript. first line of javascript refers property in @viewbag. other javascript lines plain script without mvc related references. observation: can place breakpoints (visual studio 2015) on each of these javascript lines. however, breakpoints has white dot in center of breakpoint symbol (red circle) except line @viewbag reference (this particular line not have white dot in center). it seems breakpoint without white dot hit during run-time. question: can explain going on here? white dot mean? why plain red breakpoint line line hitting breakpoint? the visual studio debugger expecting debug actual server-side code within .cshtml file opposed client-side javascript within it. iirc, visual studio allow debug javascript code expected in internet explorer (and possibly edge), other browsers want use either third-party tool or developer tools (f12) within browser. an easy approach take advant...
Read more