mirrors/postgres
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Better document use of ident on localhost, per Tom Lane's idea.

Browse Source
This commit is contained in:
Bruce Momjian 2001-07-11 20:32:11 +00:00
parent 357d9bdce5
commit 461ea6b796
2 changed files with 29 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
doc/src/sgml/client-auth.sgml
View File

@ -1,4 +1,4 @@
<!-- $Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.11 2001/05/12 22:51:34 petere Exp $ --> <!-- $Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.12 2001/07/11 20:32:10 momjian Exp $ -->
<chapter id="client-authentication"> <chapter id="client-authentication">
<title>Client Authentication</title> <title>Client Authentication</title>
@ -242,7 +242,10 @@ hostssl <replaceable>database</replaceable> <replaceable>IP-address</replaceable
of the connecting user. <productname>Postgres</productname> of the connecting user. <productname>Postgres</productname>
then verifies whether the so identified operating system user then verifies whether the so identified operating system user
is allowed to connect as the database user that is requested. is allowed to connect as the database user that is requested.
This is only available for TCP/IP connections. This is only available for TCP/IP connections. It can be used
on the local machine by specifying the localhost address 127.0.0.1.
</para>
<para>
The <replaceable>authentication option</replaceable> following The <replaceable>authentication option</replaceable> following
the <literal>ident</> keyword specifies the name of an the <literal>ident</> keyword specifies the name of an
<firstterm>ident map</firstterm> that specifies which operating <firstterm>ident map</firstterm> that specifies which operating
@ -553,7 +556,8 @@ host all 192.168.0.0 255.255.0.0 ident omicron
<attribution>RFC 1413</attribution> <attribution>RFC 1413</attribution>
<para> <para>
The Identification Protocol is not intended as an authorization The Identification Protocol is not intended as an authorization
or access control protocol. or access control protocol. You must trust the machine running the
ident server.
</para> </para>
</blockquote> </blockquote>
</para> </para>

14
src/backend/libpq/pg_hba.conf.sample
View File

@ -125,13 +125,13 @@
# secondary passwords. # secondary passwords.
# #
# ident: Authentication is done by the ident server on the local # ident: Authentication is done by the ident server on the local
# or remote host. AUTH_ARGUMENT is required and maps names # (127.0.0.1) or remote host. AUTH_ARGUMENT is required and
# found in the $PGDATA/pg_ident.conf file. The connection # maps names found in the $PGDATA/pg_ident.conf file. The
# is accepted if the file contains an entry for this map # connection is accepted if the file contains an entry for
# name with the ident-supplied username and the requested # this map name with the ident-supplied username and the
# PostgreSQL username. The special map name "sameuser" # requested PostgreSQL username. The special map name
# indicates an implied map (not in pg_ident.conf) that # "sameuser" indicates an implied map (not in pg_ident.conf)
# maps each ident username to the identical PostgreSQL # that maps each ident username to the identical PostgreSQL
# username. # username.
# #
# krb4: Kerberos V4 authentication is used. # krb4: Kerberos V4 authentication is used.