|
10 | 10 | # databases they can access. Records take one of seven forms:
|
11 | 11 | #
|
12 | 12 | # local DATABASE USER METHOD [OPTION]
|
13 |
| -# host DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION] |
14 |
| -# hostssl DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION] |
15 |
| -# hostnossl DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION] |
16 |
| -# host DATABASE USER IP-ADDRESS/CIDR-MASK METHOD [OPTION] |
17 |
| -# hostssl DATABASE USER IP-ADDRESS/CIDR-MASK METHOD [OPTION] |
18 |
| -# hostnossl DATABASE USER IP-ADDRESS/CIDR-MASK METHOD [OPTION] |
| 13 | +# host DATABASE USER CIDR-ADDRESS METHOD [OPTION] |
| 14 | +# hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTION] |
| 15 | +# hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTION] |
| 16 | +# host DATABASE USER CIDR-ADDRESS METHOD [OPTION] |
| 17 | +# hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTION] |
| 18 | +# hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTION] |
19 | 19 | #
|
20 | 20 | # (The uppercase quantities should be replaced by actual values.)
|
21 | 21 | # The first field is the connection type: "local" is a Unix-domain socket,
|
|
24 | 24 | # DATABASE can be "all", "sameuser", "samegroup", a database name (or
|
25 | 25 | # a comma-separated list thereof), or a file name prefixed with "@".
|
26 | 26 | # USER can be "all", an actual user name or a group name prefixed with
|
27 |
| -# "+" or a list containing either. IP-ADDRESS and IP-MASK specify the |
28 |
| -# set of hosts the record matches. CIDR-MASK is an integer between 0 |
29 |
| -# and 32 (IPv6) or 128(IPv6) inclusive, that specifies the number of |
30 |
| -# significant bits in the mask, so an IPv4 CIDR-MASK of 8 is equivalent |
31 |
| -# to an IP-MASK of 255.0.0.0, and an IPv6 CIDR-MASK of 64 is equivalent |
32 |
| -# to an IP-MASK of ffff:ffff:ffff:ffff::. METHOD can be "trust", "reject", |
33 |
| -# "md5", "crypt", "password", "krb4", "krb5", "ident", or "pam". Note |
34 |
| -# that "password" uses clear-text passwords; "md5" is preferred for |
35 |
| -# encrypted passwords. OPTION is the ident map or the name of the PAM |
36 |
| -# service. |
| 27 | +# "+" or a list containing either. |
| 28 | +# |
| 29 | +# CIDR-ADDRESS specifies the set of hosts the record matches. |
| 30 | +# It is made up of an IP address and a CIDR mask that is an integer |
| 31 | +# between 0 and 32 (IPv6) or 128(IPv6) inclusive, that specifies |
| 32 | +# the number of significant bits in the mask, e.g. an IPv4 CIDR mask |
| 33 | +# of 8 is equivalent to an IP mask of 255.0.0.0, an IPv6 CIDR mask |
| 34 | +# of 64 is equivalent to an IP mask of ffff:ffff:ffff:ffff::. A |
| 35 | +# IPv4 CIDR mask of 32 is used for single hosts. Also, you can use a |
| 36 | +# separate IP address and netmask to specify the set of hosts. |
| 37 | +# |
| 38 | +# METHOD can be "trust", "reject", "md5", "crypt", "password", |
| 39 | +# "krb4", "krb5", "ident", or "pam". Note that "password" uses |
| 40 | +# clear-text passwords; "md5" is preferred for encrypted passwords. |
| 41 | +# OPTION is the ident map or the name of the PAM service. |
37 | 42 | #
|
38 | 43 | # Database and user names containing spaces, commas, quotes and other special
|
39 | 44 | # characters can be quoted. Quoting one of the keywords "all", "sameuser" or
|
|
56 | 61 |
|
57 | 62 | @authcomment@
|
58 | 63 |
|
59 |
| -# TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD |
| 64 | +# TYPE DATABASE USER CIDR-ADDRESS METHOD |
60 | 65 |
|
61 |
| -local all all @authmethod@ |
| 66 | +local all all @authmethod@ |
62 | 67 | # IPv4-style local connections:
|
63 |
| -host all all 127.0.0.1/32 @authmethod@ |
| 68 | +host all all 127.0.0.1/32 @authmethod@ |
64 | 69 | # IPv6-style local connections:
|
65 |
| -host all all ::1/128 @authmethod@ |
| 70 | +host all all ::1/128 @authmethod@ |
0 commit comments