<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.102 2007/11/0917:31:07 mha Exp $ -->

<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.103 2007/11/0923:52:08 momjian Exp $ -->

<chapter id="client-authentication">

<title>Client Authentication</title>

Client principals must have their <productname>PostgreSQL</> database user

name as their first component, for example

<literal>pgusername@realm</>. By default, the realm of the client is

not checked by <productname>PostgreSQL</>. If you have cross-realm

authentication enabled and need to verify the realm, use the

<xref linkend="guc-krb-realm"> parameter.

not checked by <productname>PostgreSQL</>. If you have cross-realm

authentication enabled and need to verify the realm, use the

<xref linkend="guc-krb-realm"> parameter.

</para>

<para>

<!-- $PostgreSQL: pgsql/doc/src/sgml/config.sgml,v 1.154 2007/11/0917:31:07 mha Exp $ -->

<!-- $PostgreSQL: pgsql/doc/src/sgml/config.sgml,v 1.155 2007/11/0923:52:08 momjian Exp $ -->

<chapter Id="runtime-config">

<title>Server Configuration</title>

</listitem>

</varlistentry>

<varlistentry id="guc-krb-realm" xreflabel="krb_realm">

<term><varname>krb_realm</varname> (<type>string</type>)</term>

<indexterm>

<primary><varname>krb_realm</> configuration parameter</primary>

</indexterm>

<listitem>

<para>

Sets the realm to match Kerberos, GSSAPI and SSPI usernames against.

See <xref linkend="kerberos-auth">, <xref linkend="gssapi-auth"> or

<xref linkend="sspi-auth"> for details. This parameter can only be

set at server start.

<varlistentry id="guc-krb-realm" xreflabel="krb_realm">

<term><varname>krb_realm</varname> (<type>string</type>)</term>

<indexterm>

<primary><varname>krb_realm</> configuration parameter</primary>

</indexterm>

<listitem>

<para>

Sets the realm to match Kerberos, GSSAPI and SSPI usernames against.

See <xref linkend="kerberos-auth">, <xref linkend="gssapi-auth"> or

<xref linkend="sspi-auth"> for details. This parameter can only be

set at server start.

</para>

</listitem>

</varlistentry>

</listitem>

</varlistentry>

<varlistentry id="guc-krb-server-keyfile" xreflabel="krb_server_keyfile">

<term><varname>krb_server_keyfile</varname> (<type>string</type>)</term>