|
1 | 1 | <!-- |
2 | | -$Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.53 2003/07/26 13:50:01 momjian Exp $ |
| 2 | +$Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.54 2003/08/16 23:33:49 momjian Exp $ |
3 | 3 | --> |
4 | 4 |
|
5 | 5 | <chapter id="client-authentication"> |
@@ -610,16 +610,21 @@ local db1,db2,@demodbs all md5 |
610 | 610 |
|
611 | 611 | <para> |
612 | 612 | <productname>Kerberos</productname> is an industry-standard secure |
613 | | - authentication system suitable for distributed computing over a |
614 | | - public network. A description of the |
615 | | - <productname>Kerberos</productname> system is far beyond the scope |
616 | | - of this document; in all generality it can be quite complex (yet |
617 | | - powerful). The <ulink |
| 613 | + authentication system suitable for distributed computing over a public |
| 614 | + network. A description of the <productname>Kerberos</productname> system |
| 615 | + is far beyond the scope of this document; in all generality it can be |
| 616 | + quite complex (yet powerful). The <ulink |
618 | 617 | url="http://www.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html">Kerberos |
619 | | - <acronym>FAQ</></ulink> or <ulink |
620 | | - url="ftp://athena-dist.mit.edu">MIT Project Athena</ulink> can be |
621 | | - a good starting point for exploration. Several sources for |
622 | | - <productname>Kerberos</> distributions exist. |
| 618 | + <acronym>FAQ</></ulink> or <ulink url="ftp://athena-dist.mit.edu">MIT |
| 619 | + Project Athena</ulink> can be a good starting point for exploration. |
| 620 | + Several sources for <productname>Kerberos</> distributions exist. |
| 621 | + </para> |
| 622 | + |
| 623 | + <para> |
| 624 | + While <productname>PostgreSQL</> supports both Kerberos 4 and |
| 625 | + Kerberos 5, only Kerberos 5 is recommended. Kerberos 4 is |
| 626 | + considered insecure and no longer recommended for general |
| 627 | + use. |
623 | 628 | </para> |
624 | 629 |
|
625 | 630 | <para> |
|