From b09f930d2eec6ed2427786d9aa64c1206859774d Mon Sep 17 00:00:00 2001
From: Magnus Hagander <magnus@hagander.net>
Date: Wed, 7 Jan 2009 13:09:21 +0000
Subject: Add hba parameter include_realm to krb5, gss and sspi authentication,
 used to pass the full username@realm string to the authentication instead of
 just the username. This makes it possible to use pg_ident.conf to
 authenticate users from multiple realms as different database users.

---
 doc/src/sgml/client-auth.sgml | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

(limited to 'doc/src')

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 1d0ce45ce7f..f5cc4729101 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.116 2009/01/07 12:38:10 mha Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.117 2009/01/07 13:09:21 mha Exp $ -->
 
 <chapter id="client-authentication">
  <title>Client Authentication</title>
@@ -785,6 +785,18 @@ omicron       bryanh            guest1
       </listitem>
      </varlistentry>
 
+     <varlistentry>
+      <term>include_realm</term>
+      <listitem>
+       <para>
+        Include the realm name from the authenticated user principal. This is useful
+        in combination with Username maps (See <xref linkend="auth-username-maps">
+        for details), especially with regular expressions, to map users from
+        multiple realms.
+       </para>
+      </listitem>
+     </varlistentry>
+
      <varlistentry>
       <term>krb_realm</term>
       <listitem>
@@ -846,6 +858,18 @@ omicron       bryanh            guest1
       </listitem>
      </varlistentry>
 
+     <varlistentry>
+      <term>include_realm</term>
+      <listitem>
+       <para>
+        Include the realm name from the authenticated user principal. This is useful
+        in combination with Username maps (See <xref linkend="auth-username-maps">
+        for details), especially with regular expressions, to map users from
+        multiple realms.
+       </para>
+      </listitem>
+     </varlistentry>
+
      <varlistentry>
       <term>krb_realm</term>
       <listitem>
-- 
cgit v1.2.3