|
1 |
| -<!-- $Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.9 2000/11/21 20:44:31 tgl Exp $ --> |
| 1 | +<!-- $Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.10 2001/03/15 20:01:32 tgl Exp $ --> |
2 | 2 |
|
3 | 3 | <chapter id="client-authentication">
|
4 | 4 | <title>Client Authentication</title>
|
|
56 | 56 | of a set of records, one per line. Blank lines and lines beginning
|
57 | 57 | with a hash character (<quote>#</quote>) are ignored. A record is
|
58 | 58 | made up of a number of fields which are separated by spaces and/or
|
59 |
| - tabs and cannot be continued across several lines. |
| 59 | + tabs. Records cannot be continued across lines. |
60 | 60 | </para>
|
61 | 61 |
|
62 | 62 | <para>
|
@@ -85,7 +85,7 @@ hostssl <replaceable>database</replaceable> <replaceable>IP-address</replaceable
|
85 | 85 | <para>
|
86 | 86 | This record pertains to connection attempts over TCP/IP
|
87 | 87 | networks. Note that TCP/IP connections are completely disabled
|
88 |
| - unless the server is started with the <option>-i</option> or |
| 88 | + unless the server is started with the <option>-i</option> switch or |
89 | 89 | the equivalent configuration parameter is set.
|
90 | 90 | </para>
|
91 | 91 | </listitem>
|
@@ -234,6 +234,7 @@ hostssl <replaceable>database</replaceable> <replaceable>IP-address</replaceable
|
234 | 234 | of the connecting user. <productname>Postgres</productname>
|
235 | 235 | then verifies whether the so identified operating system user
|
236 | 236 | is allowed to connect as the database user that is requested.
|
| 237 | + This is only available for TCP/IP connections. |
237 | 238 | The <replaceable>authentication option</replaceable> following
|
238 | 239 | the <literal>ident</> keyword specifies the name of an
|
239 | 240 | <firstterm>ident map</firstterm> that specifies which operating
|
@@ -507,7 +508,7 @@ host all 192.168.0.0 255.255.0.0 ident omicron
|
507 | 508 | <para>
|
508 | 509 | The <quote>Identification Protocol</quote> is described in
|
509 | 510 | <citetitle>RFC 1413</citetitle>. Virtually every Unix-like
|
510 |
| - operating systems ships with an ident server that listens on TCP |
| 511 | + operating system ships with an ident server that listens on TCP |
511 | 512 | port 113 by default. The basic functionality of an ident server
|
512 | 513 | is to answer questions like <quote>What user initiated the
|
513 | 514 | connection that goes out of your port <replaceable>X</replaceable>
|
@@ -628,14 +629,14 @@ Password authentication failed for user 'joeblow'
|
628 | 629 |
|
629 | 630 | <para>
|
630 | 631 | <ProgramListing>
|
631 |
| -FATAL 1: SetUserId: user 'joeblow' is not in 'pg_shadow' |
| 632 | +FATAL 1: user "joeblow" does not exist |
632 | 633 | </ProgramListing>
|
633 |
| - This is the fancy way of saying that the user doesn't exist at all. |
| 634 | + The indicated user name was not found in pg_shadow. |
634 | 635 | </para>
|
635 | 636 |
|
636 | 637 | <para>
|
637 | 638 | <ProgramListing>
|
638 |
| -FATAL 1: Database testdb does not exist in pg_database |
| 639 | +FATAL 1: Database "testdb" does not exist in the system catalog. |
639 | 640 | </ProgramListing>
|
640 | 641 | The database you're trying to connect to doesn't exist. Note that
|
641 | 642 | if you don't specify a database name, it defaults to the database
|
|
0 commit comments