1
- <!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.126 2010/01/15 09:18:56 heikki Exp $ -->
1
+ <!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.127 2010/01/26 06:45:31 petere Exp $ -->
2
2
3
3
<chapter id="client-authentication">
4
4
<title>Client Authentication</title>
@@ -492,50 +492,50 @@ hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable>
492
492
# any database user name using Unix-domain sockets (the default for local
493
493
# connections).
494
494
#
495
- # TYPE DATABASE USER CIDR-ADDRESS METHOD
496
- local all all trust
495
+ # TYPE DATABASE USER CIDR-ADDRESS METHOD
496
+ local all all trust
497
497
498
498
# The same using local loopback TCP/IP connections.
499
499
#
500
- # TYPE DATABASE USER CIDR-ADDRESS METHOD
501
- host all all 127.0.0.1/32 trust
500
+ # TYPE DATABASE USER CIDR-ADDRESS METHOD
501
+ host all all 127.0.0.1/32 trust
502
502
503
503
# The same as the previous line, but using a separate netmask column
504
504
#
505
- # TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD
506
- host all all 127.0.0.1 255.255.255.255 trust
505
+ # TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD
506
+ host all all 127.0.0.1 255.255.255.255 trust
507
507
508
508
# Allow any user from any host with IP address 192.168.93.x to connect
509
509
# to database "postgres" as the same user name that ident reports for
510
510
# the connection (typically the Unix user name).
511
511
#
512
- # TYPE DATABASE USER CIDR-ADDRESS METHOD
513
- host postgres all 192.168.93.0/24 ident
512
+ # TYPE DATABASE USER CIDR-ADDRESS METHOD
513
+ host postgres all 192.168.93.0/24 ident
514
514
515
515
# Allow any user from host 192.168.12.10 to connect to database
516
516
# "postgres" if the user's password is correctly supplied.
517
517
#
518
- # TYPE DATABASE USER CIDR-ADDRESS METHOD
519
- host postgres all 192.168.12.10/32 md5
518
+ # TYPE DATABASE USER CIDR-ADDRESS METHOD
519
+ host postgres all 192.168.12.10/32 md5
520
520
521
521
# In the absence of preceding "host" lines, these two lines will
522
522
# reject all connections from 192.168.54.1 (since that entry will be
523
523
# matched first), but allow Kerberos 5 connections from anywhere else
524
524
# on the Internet. The zero mask means that no bits of the host IP
525
525
# address are considered so it matches any host.
526
526
#
527
- # TYPE DATABASE USER CIDR-ADDRESS METHOD
528
- host all all 192.168.54.1/32 reject
529
- host all all 0.0.0.0/0 krb5
527
+ # TYPE DATABASE USER CIDR-ADDRESS METHOD
528
+ host all all 192.168.54.1/32 reject
529
+ host all all 0.0.0.0/0 krb5
530
530
531
531
# Allow users from 192.168.x.x hosts to connect to any database, if
532
532
# they pass the ident check. If, for example, ident says the user is
533
533
# "bryanh" and he requests to connect as PostgreSQL user "guest1", the
534
534
# connection is allowed if there is an entry in pg_ident.conf for map
535
535
# "omicron" that says "bryanh" is allowed to connect as "guest1".
536
536
#
537
- # TYPE DATABASE USER CIDR-ADDRESS METHOD
538
- host all all 192.168.0.0/16 ident map=omicron
537
+ # TYPE DATABASE USER CIDR-ADDRESS METHOD
538
+ host all all 192.168.0.0/16 ident map=omicron
539
539
540
540
# If these are the only three lines for local connections, they will
541
541
# allow local users to connect only to their own databases (databases
@@ -544,16 +544,16 @@ host all all 192.168.0.0/16 ident map=omicron
544
544
# $PGDATA/admins contains a list of names of administrators. Passwords
545
545
# are required in all cases.
546
546
#
547
- # TYPE DATABASE USER CIDR-ADDRESS METHOD
548
- local sameuser all md5
549
- local all @admins md5
550
- local all +support md5
547
+ # TYPE DATABASE USER CIDR-ADDRESS METHOD
548
+ local sameuser all md5
549
+ local all @admins md5
550
+ local all +support md5
551
551
552
552
# The last two lines above can be combined into a single line:
553
- local all @admins,+support md5
553
+ local all @admins,+support md5
554
554
555
555
# The database column can also use lists and file names:
556
- local db1,db2,@demodbs all md5
556
+ local db1,db2,@demodbs all md5
557
557
</programlisting>
558
558
</example>
559
559
</sect1>
@@ -668,14 +668,14 @@ mymap /^(.*)@otherdomain\.com$ guest
668
668
<example id="example-pg-ident.conf">
669
669
<title>An example <filename>pg_ident.conf</> file</title>
670
670
<programlisting>
671
- # MAPNAME SYSTEM-USERNAME PG-USERNAME
671
+ # MAPNAME SYSTEM-USERNAME PG-USERNAME
672
672
673
- omicron bryanh bryanh
674
- omicron ann ann
673
+ omicron bryanh bryanh
674
+ omicron ann ann
675
675
# bob has user name robert on these machines
676
- omicron robert bob
676
+ omicron robert bob
677
677
# bryanh can also connect as guest1
678
- omicron bryanh guest1
678
+ omicron bryanh guest1
679
679
</programlisting>
680
680
</example>
681
681
</sect1>
0 commit comments