summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBruce Momjian <bruce@momjian.us>2006-11-23 05:39:17 +0000
committerBruce Momjian <bruce@momjian.us>2006-11-23 05:39:17 +0000
commitebf071643a0346474de269d013941a8a098fe8b7 (patch)
treece643ba07536cfe62f7cb14f43bae64b0665ce75
parent4ed6f6d47969e09ed4585efbc65e8aecd67e4602 (diff)
Document that Kerberos is for authentication, and does not encrypt data
or queries over the network.
-rw-r--r--doc/src/sgml/client-auth.sgml5
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index f418332a395..4b7c2c47093 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.95 2006/11/17 23:25:17 tgl Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.96 2006/11/23 05:39:17 momjian Exp $ -->
<chapter id="client-authentication">
<title>Client Authentication</title>
@@ -653,6 +653,9 @@ local db1,db2,@demodbs all md5
<ulink url="http://web.mit.edu/kerberos/www/">MIT Kerberos page</ulink>
can be good starting points for exploration.
Several sources for <productname>Kerberos</> distributions exist.
+ <productname>Kerberos</productname> provides secure authentication but
+ does not encrypt queries or data passed over the network; for that
+ use <acronym>SSL</acronym>.
</para>
<para>