Hi,

GSS authentication is working for users with small number of AD groups but 
getting below error when a user has larger number of groups. I believe it might 
to token size related, but they don't have issues when authenticating with 
Kerberos/GSS to other applications, only with Postgres.

failed: GSSAPI context establishment error: The routine must be called again to 
complete its function: Unknown error

Is this a hard limit or can this be configurable?
Also, what is the best way to debug this as the postgresql.log does not have 
anything useful. Running on Alma Linux 9

Thanks,
Chris

This email and any attachments should not be construed as an offer or 
recommendation to sell or buy or a solicitation of an offer to sell or buy any 
specific security, fund or instrument or to participate in any particular 
investment strategy. The information contained herein is given as of a certain 
date and does not purport to give information as of any other date. Although 
the information presented herein has been obtained from sources we believe to 
be reliable, no representation or warranty, expressed or implied, is made as to 
the accuracy or completeness of that information. Past performance is not 
indicative of future results.

CONFIDENTIALITY NOTICE: This message and any attachment are confidential. If 
you are not the intended recipient, please telephone or email the sender and 
delete this message and any attachment from your system. If you are not the 
intended recipient you must not copy this message or attachment or disclose the 
contents to any other persons.

Balyasny Asset Management (UK) LLP is authorised and regulated by the Financial 
Conduct Authority in the UK. Balyasny Asset Management LP is registered as an 
Investment Advisor with the Securities and Exchange Commission in the USA.

BAM prohibits all personnel from having any business related communications 
over text message or other unapproved communication applications. Unless 
pre-approved, BAM employees are only permitted to communicate over email, 
Bloomberg and BAM telephone lines.

Reply via email to