diff options
| author | Magnus Hagander <magnus@hagander.net> | 2007-11-09 17:31:07 +0000 |
|---|---|---|
| committer | Magnus Hagander <magnus@hagander.net> | 2007-11-09 17:31:07 +0000 |
| commit | 4b606ee444a1663a5ae668f5cd0560f165b04c43 (patch) | |
| tree | 283b9f84bf59aae4de2d6930198ea4b666b33870 /src/backend/utils/misc/guc.c | |
| parent | a7cd5a4aa0271aa8fe35b6e825b28bb452ac7ca7 (diff) | |
Add parameter krb_realm used by GSSAPI, SSPI and Kerberos
to validate the realm of the connecting user. By default
it's empty meaning no verification, which is the way
Kerberos authentication has traditionally worked in
PostgreSQL.
Diffstat (limited to 'src/backend/utils/misc/guc.c')
| -rw-r--r-- | src/backend/utils/misc/guc.c | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/src/backend/utils/misc/guc.c b/src/backend/utils/misc/guc.c index 64eeaabef3d..49a4cc722e0 100644 --- a/src/backend/utils/misc/guc.c +++ b/src/backend/utils/misc/guc.c @@ -10,7 +10,7 @@ * Written by Peter Eisentraut <peter_e@gmx.net>. * * IDENTIFICATION - * $PostgreSQL: pgsql/src/backend/utils/misc/guc.c,v 1.423 2007/09/26 22:36:30 tgl Exp $ + * $PostgreSQL: pgsql/src/backend/utils/misc/guc.c,v 1.424 2007/11/09 17:31:07 mha Exp $ * *-------------------------------------------------------------------- */ @@ -2044,6 +2044,16 @@ static struct config_string ConfigureNamesString[] = }, { + {"krb_realm", PGC_POSTMASTER, CONN_AUTH_SECURITY, + gettext_noop("Sets realm to match Kerberos and GSSAPI users against."), + NULL, + GUC_SUPERUSER_ONLY + }, + &pg_krb_realm, + NULL, NULL, NULL + }, + + { {"krb_server_keyfile", PGC_POSTMASTER, CONN_AUTH_SECURITY, gettext_noop("Sets the location of the Kerberos server key file."), NULL, |