diff options
| author | Magnus Hagander <magnus@hagander.net> | 2009-01-07 13:09:21 +0000 |
|---|---|---|
| committer | Magnus Hagander <magnus@hagander.net> | 2009-01-07 13:09:21 +0000 |
| commit | b09f930d2eec6ed2427786d9aa64c1206859774d (patch) | |
| tree | 3e23adb32f5dfa09e7afa8f1cfc683baa3802503 /doc/src | |
| parent | 32c469d7b13e430105ee018b493587c4f6c0150a (diff) | |
Add hba parameter include_realm to krb5, gss and sspi authentication, used
to pass the full username@realm string to the authentication instead of
just the username. This makes it possible to use pg_ident.conf to authenticate
users from multiple realms as different database users.
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/client-auth.sgml | 26 |
1 files changed, 25 insertions, 1 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index 1d0ce45ce7f..f5cc4729101 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -1,4 +1,4 @@ -<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.116 2009/01/07 12:38:10 mha Exp $ --> +<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.117 2009/01/07 13:09:21 mha Exp $ --> <chapter id="client-authentication"> <title>Client Authentication</title> @@ -786,6 +786,18 @@ omicron bryanh guest1 </varlistentry> <varlistentry> + <term>include_realm</term> + <listitem> + <para> + Include the realm name from the authenticated user principal. This is useful + in combination with Username maps (See <xref linkend="auth-username-maps"> + for details), especially with regular expressions, to map users from + multiple realms. + </para> + </listitem> + </varlistentry> + + <varlistentry> <term>krb_realm</term> <listitem> <para> @@ -847,6 +859,18 @@ omicron bryanh guest1 </varlistentry> <varlistentry> + <term>include_realm</term> + <listitem> + <para> + Include the realm name from the authenticated user principal. This is useful + in combination with Username maps (See <xref linkend="auth-username-maps"> + for details), especially with regular expressions, to map users from + multiple realms. + </para> + </listitem> + </varlistentry> + + <varlistentry> <term>krb_realm</term> <listitem> <para> |