summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMagnus Hagander <magnus@hagander.net>2007-11-14 14:25:55 +0000
committerMagnus Hagander <magnus@hagander.net>2007-11-14 14:25:55 +0000
commit93940592613958f15e96884b302a03a3b83afc28 (patch)
tree124c4c23688bb8e95e1e4f5b3b21a15c0d9ffccc
parent144c519842d4bcb739739189d623613694d684a8 (diff)
Add note about deprecating krb5 authentication in favour of GSSAPI,
per discussions (a long time ago). Documentation only, we keep full support in the code.
-rw-r--r--doc/src/sgml/client-auth.sgml11
1 files changed, 10 insertions, 1 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index fd1b25ac787..4e874b72720 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.103 2007/11/09 23:52:08 momjian Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.104 2007/11/14 14:25:55 mha Exp $ -->
<chapter id="client-authentication">
<title>Client Authentication</title>
@@ -722,6 +722,15 @@ local db1,db2,@demodbs all md5
<primary>Kerberos</primary>
</indexterm>
+ <note>
+ <para>
+ Native Kerberos authentication has been deprecated and should be used
+ only for backward compatibility. New and upgraded installations are
+ encouraged to use the industry-standard <productname>GSSAPI</productname>
+ authentication (see <xref linkend="gssapi-auth">) instead.
+ </para>
+ </note>
+
<para>
<productname>Kerberos</productname> is an industry-standard secure
authentication system suitable for distributed computing over a public