diff options
| author | Bruce Momjian <bruce@momjian.us> | 2001-07-11 20:32:11 +0000 |
|---|---|---|
| committer | Bruce Momjian <bruce@momjian.us> | 2001-07-11 20:32:11 +0000 |
| commit | 461ea6b796bd9dac701324a840cf32e1aee6932f (patch) | |
| tree | da2788ef21efbb57ce89f209d2e7827940276467 /doc/src | |
| parent | 357d9bdce5ab0336d48b9ee9f9448a5fd7e47c65 (diff) | |
| download | postgresql-461ea6b796bd9dac701324a840cf32e1aee6932f.tar.gz postgresql-461ea6b796bd9dac701324a840cf32e1aee6932f.zip | |
Better document use of ident on localhost, per Tom Lane's idea.
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/client-auth.sgml | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index 7ba2a36e2c1..9067f532397 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -1,4 +1,4 @@ -<!-- $Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.11 2001/05/12 22:51:34 petere Exp $ --> +<!-- $Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.12 2001/07/11 20:32:10 momjian Exp $ --> <chapter id="client-authentication"> <title>Client Authentication</title> @@ -242,7 +242,10 @@ hostssl <replaceable>database</replaceable> <replaceable>IP-address</replaceable of the connecting user. <productname>Postgres</productname> then verifies whether the so identified operating system user is allowed to connect as the database user that is requested. - This is only available for TCP/IP connections. + This is only available for TCP/IP connections. It can be used + on the local machine by specifying the localhost address 127.0.0.1. + </para> + <para> The <replaceable>authentication option</replaceable> following the <literal>ident</> keyword specifies the name of an <firstterm>ident map</firstterm> that specifies which operating @@ -553,7 +556,8 @@ host all 192.168.0.0 255.255.0.0 ident omicron <attribution>RFC 1413</attribution> <para> The Identification Protocol is not intended as an authorization - or access control protocol. + or access control protocol. You must trust the machine running the + ident server. </para> </blockquote> </para> |