|
1 | 1 | # PostgreSQL Client Authentication Configuration File
|
2 | 2 | # ===================================================
|
3 | 3 | #
|
4 |
| -# Refer to the "Client Authentication" section in the |
5 |
| -# PostgreSQL documentation for a complete description |
6 |
| -# of this file. A short synopsis follows. |
| 4 | +# Refer to the "Client Authentication" section in the PostgreSQL |
| 5 | +# documentation for a complete description of this file. A short |
| 6 | +# synopsis follows. |
7 | 7 | #
|
8 | 8 | # This file controls: which hosts are allowed to connect, how clients
|
9 | 9 | # are authenticated, which PostgreSQL user names they can use, which
|
|
16 | 16 | #
|
17 | 17 | # (The uppercase items must be replaced by actual values.)
|
18 | 18 | #
|
19 |
| -# The first field is the connection type: "local" is a Unix-domain socket, |
20 |
| -# "host" is either a plain or SSL-encrypted TCP/IP socket, "hostssl" is an |
21 |
| -# SSL-encrypted TCP/IP socket, and "hostnossl" is a plain TCP/IP socket. |
| 19 | +# The first field is the connection type: "local" is a Unix-domain |
| 20 | +# socket, "host" is either a plain or SSL-encrypted TCP/IP socket, |
| 21 | +# "hostssl" is an SSL-encrypted TCP/IP socket, and "hostnossl" is a |
| 22 | +# plain TCP/IP socket. |
22 | 23 | #
|
23 |
| -# DATABASE can be "all", "sameuser", "samerole", "replication", |
24 |
| -# a database name, or a comma-separated list thereof. |
| 24 | +# DATABASE can be "all", "sameuser", "samerole", "replication", a |
| 25 | +# database name, or a comma-separated list thereof. |
25 | 26 | #
|
26 |
| -# USER can be "all", a user name, a group name prefixed with "+", or |
27 |
| -# a comma-separated list thereof. In both the DATABASE and USER fields |
28 |
| -# you can also write a file name prefixed with "@" to include names from |
29 |
| -# a separate file. |
| 27 | +# USER can be "all", a user name, a group name prefixed with "+", or a |
| 28 | +# comma-separated list thereof. In both the DATABASE and USER fields |
| 29 | +# you can also write a file name prefixed with "@" to include names |
| 30 | +# from a separate file. |
30 | 31 | #
|
31 |
| -# CIDR-ADDRESS specifies the set of hosts the record matches. |
32 |
| -# It is made up of an IP address and a CIDR mask that is an integer |
33 |
| -# (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies |
34 |
| -# the number of significant bits in the mask. Alternatively, you can write |
35 |
| -# an IP address and netmask in separate columns to specify the set of hosts. |
36 |
| -# Instead of a CIDR-address, you can write "samehost" to match any of the |
37 |
| -# server's own IP addresses, or "samenet" to match any address in any subnet |
38 |
| -# that the server is directly connected to. |
| 32 | +# CIDR-ADDRESS specifies the set of hosts the record matches. It is |
| 33 | +# made up of an IP address and a CIDR mask that is an integer (between |
| 34 | +# 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies the number |
| 35 | +# of significant bits in the mask. Alternatively, you can write an IP |
| 36 | +# address and netmask in separate columns to specify the set of hosts. |
| 37 | +# Instead of a CIDR-address, you can write "samehost" to match any of |
| 38 | +# the server's own IP addresses, or "samenet" to match any address in |
| 39 | +# any subnet that the server is directly connected to. |
39 | 40 | #
|
40 |
| -# METHOD can be "trust", "reject", "md5", "password", "gss", "sspi", "krb5", |
41 |
| -# "ident", "pam", "ldap" or "cert". Note that "password" sends passwords |
42 |
| -# in clear text; "md5" is preferred since it sends encrypted passwords. |
| 41 | +# METHOD can be "trust", "reject", "md5", "password", "gss", "sspi", |
| 42 | +# "krb5", "ident", "pam", "ldap" or "cert". Note that "password" |
| 43 | +# sends passwords in clear text; "md5" is preferred since it sends |
| 44 | +# encrypted passwords. |
43 | 45 | #
|
44 | 46 | # OPTIONS are a set of options for the authentication in the format
|
45 |
| -# NAME=VALUE. The available options depend on the different authentication |
46 |
| -# methods - refer to the "Client Authentication" section in the documentation |
47 |
| -# for a list of which options are available for which authentication methods. |
| 47 | +# NAME=VALUE. The available options depend on the different |
| 48 | +# authentication methods -- refer to the "Client Authentication" |
| 49 | +# section in the documentation for a list of which options are |
| 50 | +# available for which authentication methods. |
48 | 51 | #
|
49 |
| -# Database and user names containing spaces, commas, quotes and other special |
50 |
| -# characters must be quoted. Quoting one of the keywords "all", "sameuser", |
51 |
| -# "samerole" or "replication" makes the name lose its special character, |
52 |
| -# and just match a database or username with that name. |
| 52 | +# Database and user names containing spaces, commas, quotes and other |
| 53 | +# special characters must be quoted. Quoting one of the keywords |
| 54 | +# "all", "sameuser", "samerole" or "replication" makes the name lose |
| 55 | +# its special character, and just match a database or username with |
| 56 | +# that name. |
53 | 57 | #
|
54 | 58 | # This file is read on server startup and when the postmaster receives
|
55 | 59 | # a SIGHUP signal. If you edit the file on a running system, you have
|
56 |
| -# to SIGHUP the postmaster for the changes to take effect. You can use |
57 |
| -# "pg_ctl reload" to do that. |
| 60 | +# to SIGHUP the postmaster for the changes to take effect. You can |
| 61 | +# use "pg_ctl reload" to do that. |
58 | 62 |
|
59 | 63 | # Put your actual configuration here
|
60 | 64 | # ----------------------------------
|
61 | 65 | #
|
62 | 66 | # If you want to allow non-local connections, you need to add more
|
63 |
| -# "host" records. In that case you will also need to make PostgreSQL listen |
64 |
| -# on a non-local interface via the listen_addresses configuration parameter, |
65 |
| -# or via the -i or -h command line switches. |
66 |
| -# |
| 67 | +# "host" records. In that case you will also need to make PostgreSQL |
| 68 | +# listen on a non-local interface via the listen_addresses |
| 69 | +# configuration parameter, or via the -i or -h command line switches. |
67 | 70 |
|
68 | 71 | @authcomment@
|
69 | 72 |
|
|
0 commit comments