less /usr/local/share/doc/postgresql/README.OpenBSD
Kerberos authentication
By default the postgresql server requires it's own krb5.keytab file. It
should be readable only by the _postgresql user. The default location of
the file is '/etc/postgresql/krb5.keytab' but is tunable by setting the
krb_server_keyfile line in postgresql.conf.
To generate the keytab:
# mkdir /etc/postgresql
# ktutil -k /etc/postgresql/krb5.keytab get postgres/server.domain
# chown _postgresql:_postgresql /etc/postgresql/krb5.keytab
I try this:
# ktutil -k /etc/postgresql/krb5.keytab get postgres/server.domain
The answer is:
ktutil: kadm5_init_with_password: Cannot contact any KDC for requested realm
What I do wrong?
Thank you for the help!
Joerg