Re: [Freeipa-devel] PostgreSQL + freeipa

2013-10-01 Thread Alexander Bokovoy
On Tue, 01 Oct 2013, Gorbachev Ivan wrote: Thank you! And one more question, what does error mean - "GSSAPI continuation error: No credentials found with supported encryption types". This error appears when I try to log in from another computer within the domain IPA. You need to look into what e

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-10-01 Thread Gorbachev Ivan
Thank you! And one more question, what does error mean - "GSSAPI continuation error: No credentials found with supported encryption types". This error appears when I try to log in from another computer within the domain IPA. On Mon, Sep 30, 2013 at 7:58 PM, Alexander Bokovoy wrote: > On Mon, 30

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-09-30 Thread Alexander Bokovoy
On Mon, 30 Sep 2013, Gorbachev Ivan wrote: I should add the role every time then add ipa users ? For example, i have one role for PostgreSQL, and after add a new IPA user, i should add mapping for this new user ? Or it would be made automaticaly ? This is PostgreSQL-specific question, nothing sp

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-09-30 Thread Gorbachev Ivan
I should add the role every time then add ipa users ? For example, i have one role for PostgreSQL, and after add a new IPA user, i should add mapping for this new user ? Or it would be made automaticaly ? On Mon, Sep 30, 2013 at 7:03 PM, Alexander Bokovoy wrote: > On Mon, 30 Sep 2013, Gorbachev I

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-09-30 Thread Alexander Bokovoy
On Mon, 30 Sep 2013, Gorbachev Ivan wrote: Hi! Sorry for my English. Can you help me. I try to add PostgreSQL authentication to IPA. Server of IPA host name - server.my.domain.local database PostgreSQL host name - database.my.domain.local 1.pg_hba.conf – add record hostallall

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-09-30 Thread Paul Robert Marino
did you properly reconfigure your pg_hba.conf to accept kerberos auth for the user and network interfaces in question? that file can be surprisingly fussy about its content. I would also check if the selinux context was set correctly on the file. I see no mention of it in the article and its one o

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-09-30 Thread Gorbachev Ivan
I know about this article, and i made it like He. But, i can't connect to PostgreSQL =((( On Mon, Sep 30, 2013 at 6:21 PM, Rob Crittenden wrote: > Gorbachev Ivan wrote: > >> Hi! >> >> Sorry for my English. Can you help me. I try to add PostgreSQL >> authentication to IPA. >> >> Server of IPA hos

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-09-30 Thread Martin Kosek
On 09/30/2013 04:21 PM, Rob Crittenden wrote: > Gorbachev Ivan wrote: ... > Adam got IPA working with Postgres in OpenStack and wrote a blog post about > it: > http://adam.younglogic.com/2013/05/kerberizing-postgresql-with-freeipa-for-keystone/ > > > The steps aren't directly comparable because

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-09-30 Thread Rob Crittenden
Gorbachev Ivan wrote: Hi! Sorry for my English. Can you help me. I try to add PostgreSQL authentication to IPA. Server of IPA host name - server.my.domain.local database PostgreSQL host name - database.my.domain.local 1.pg_hba.conf – add record hostallall 192.168.0.0/24