From 4b606ee444a1663a5ae668f5cd0560f165b04c43 Mon Sep 17 00:00:00 2001 From: Magnus Hagander Date: Fri, 9 Nov 2007 17:31:07 +0000 Subject: Add parameter krb_realm used by GSSAPI, SSPI and Kerberos to validate the realm of the connecting user. By default it's empty meaning no verification, which is the way Kerberos authentication has traditionally worked in PostgreSQL. --- src/backend/utils/misc/postgresql.conf.sample | 1 + 1 file changed, 1 insertion(+) (limited to 'src/backend/utils/misc/postgresql.conf.sample') diff --git a/src/backend/utils/misc/postgresql.conf.sample b/src/backend/utils/misc/postgresql.conf.sample index 48023bc4ddf..3a94829ced1 100644 --- a/src/backend/utils/misc/postgresql.conf.sample +++ b/src/backend/utils/misc/postgresql.conf.sample @@ -85,6 +85,7 @@ #krb_server_hostname = '' # empty string matches any keytab entry # (change requires restart, kerberos only) #krb_caseins_users = off # (change requires restart) +#krb_realm = '' # (change requires restart) # - TCP Keepalives - # see 'man 7 tcp' for details -- cgit v1.2.3