Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit0f8571b

Browse files
committed
Doc: add a short summary of available authentication methods.
The "auth-methods" <sect1> used to include descriptions of all ourauthentication methods. Commit56811e5 promoted its child <sect2>'sto <sect1>'s, which has advantages but also created some issues:* The auth-methods page itself is essentially empty/useless.* Links that pointed to "auth-methods" as a placeholder for allauth methods were rendered a bit nonsensical.* DocBook no longer provides a subsection table-of-contents here,which formerly was a useful if terse summary of available auth methods.To improve matters, add a handwritten list of all the auth methods.Per gripe from Dave Cramer. Back-patch to v11 where the previouscommit came in.Discussion:https://postgr.es/m/CADK3HH+xQLhcPgg=kWqfogtXGGZr-JdSo=x=WQC0PkAVyxUWyQ@mail.gmail.com
1 parent0468301 commit0f8571b

File tree

1 file changed

+94
-1
lines changed

1 file changed

+94
-1
lines changed

‎doc/src/sgml/client-auth.sgml

Lines changed: 94 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -860,8 +860,101 @@ omicron bryanh guest1
860860

861861
<sect1 id="auth-methods">
862862
<title>Authentication Methods</title>
863+
864+
<para>
865+
<productname>PostgreSQL</productname> provides various methods for
866+
authenticating users:
867+
868+
<itemizedlist>
869+
<listitem>
870+
<para>
871+
<link linkend="auth-trust">Trust authentication</link>, which
872+
simply trusts that users are who they say they are.
873+
</para>
874+
</listitem>
875+
<listitem>
876+
<para>
877+
<link linkend="auth-password">Password authentication</link>, which
878+
requires that users send a password.
879+
</para>
880+
</listitem>
881+
<listitem>
882+
<para>
883+
<link linkend="gssapi-auth">GSSAPI authentication</link>, which
884+
relies on a GSSAPI-compatible security library. Typically this is
885+
used to access an authentication server such as a Kerberos or
886+
Microsoft Active Directory server.
887+
</para>
888+
</listitem>
889+
<listitem>
890+
<para>
891+
<link linkend="sspi-auth">SSPI authentication</link>, which
892+
uses a Windows-specific protocol similar to GSSAPI.
893+
</para>
894+
</listitem>
895+
<listitem>
896+
<para>
897+
<link linkend="auth-ident">Ident authentication</link>, which
898+
relies on an <quote>Identification Protocol</quote> (RFC 1413)
899+
service on the client's machine. (On local Unix-socket connections,
900+
this is treated as peer authentication.)
901+
</para>
902+
</listitem>
903+
<listitem>
904+
<para>
905+
<link linkend="auth-peer">Peer authentication</link>, which
906+
relies on operating system facilities to identify the process at the
907+
other end of a local connection. This is not supported for remote
908+
connections.
909+
</para>
910+
</listitem>
911+
<listitem>
912+
<para>
913+
<link linkend="auth-ldap">LDAP authentication</link>, which
914+
relies on an LDAP authentication server.
915+
</para>
916+
</listitem>
917+
<listitem>
918+
<para>
919+
<link linkend="auth-radius">RADIUS authentication</link>, which
920+
relies on a RADIUS authentication server.
921+
</para>
922+
</listitem>
923+
<listitem>
924+
<para>
925+
<link linkend="auth-cert">Certificate authentication</link>, which
926+
requires an SSL connection and authenticates users by checking the
927+
SSL certificate they send.
928+
</para>
929+
</listitem>
930+
<listitem>
931+
<para>
932+
<link linkend="auth-pam">PAM authentication</link>, which
933+
relies on a PAM (Pluggable Authentication Modules) library.
934+
</para>
935+
</listitem>
936+
<listitem>
937+
<para>
938+
<link linkend="auth-bsd">BSD authentication</link>, which
939+
relies on the BSD Authentication framework (currently available
940+
only on OpenBSD).
941+
</para>
942+
</listitem>
943+
</itemizedlist>
944+
</para>
945+
946+
<para>
947+
Peer authentication is usually recommendable for local connections,
948+
though trust authentication might be sufficient in some circumstances.
949+
Password authentication is the easiest choice for remote connections.
950+
All the other options require some kind of external security
951+
infrastructure (usually an authentication server or a certificate
952+
authority for issuing SSL certificates), or are platform-specific.
953+
</para>
954+
863955
<para>
864-
The following sections describe the authentication methods in more detail.
956+
The following sections describe each of these authentication methods
957+
in more detail.
865958
</para>
866959
</sect1>
867960

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp