|
10 | 10 | * |
11 | 11 | * |
12 | 12 | * IDENTIFICATION |
13 | | - * $PostgreSQL: pgsql/src/backend/libpq/hba.c,v 1.201 2010/03/06 00:45:49 tgl Exp $ |
| 13 | + * $PostgreSQL: pgsql/src/backend/libpq/hba.c,v 1.202 2010/03/08 09:57:26 mha Exp $ |
14 | 14 | * |
15 | 15 | *------------------------------------------------------------------------- |
16 | 16 | */ |
@@ -998,6 +998,22 @@ parse_hba_line(List *line, int line_num, HbaLine *parsedline) |
998 | 998 | return false; |
999 | 999 | } |
1000 | 1000 |
|
| 1001 | +if (parsedline->conntype==ctLocal&& |
| 1002 | +parsedline->auth_method==uaGSS) |
| 1003 | +{ |
| 1004 | +ereport(LOG, |
| 1005 | +(errcode(ERRCODE_CONFIG_FILE_ERROR), |
| 1006 | +errmsg("gssapi authentication is not supported on local sockets"), |
| 1007 | +errcontext("line %d of configuration file \"%s\"", |
| 1008 | +line_num,HbaFileName))); |
| 1009 | +return false; |
| 1010 | +} |
| 1011 | +/* |
| 1012 | + * SSPI authentication can never be enabled on ctLocal connections, because |
| 1013 | + * it's only supported on Windows, where ctLocal isn't supported. |
| 1014 | + */ |
| 1015 | + |
| 1016 | + |
1001 | 1017 | if (parsedline->conntype!=ctHostSSL&& |
1002 | 1018 | parsedline->auth_method==uaCert) |
1003 | 1019 | { |
|