|
7 | 7 | # |
8 | 8 | # This file controls: which hosts are allowed to connect, how clients |
9 | 9 | # are authenticated, which PostgreSQL user names they can use, which |
10 | | -# databases they can access. Records take one ofthree forms: |
| 10 | +# databases they can access. Records take one offive forms: |
11 | 11 | # |
12 | 12 | # local DATABASE USER METHOD [OPTION] |
13 | | -# host DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION] |
14 | | -# hostssl DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION] |
| 13 | +# host DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION] |
| 14 | +# hostssl DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION] |
| 15 | +# host DATABASE USER IP-ADDRESS/CIDR-MASK METHOD [OPTION] |
| 16 | +# hostssl DATABASE USER IP-ADDRESS/CIDR-MASK METHOD [OPTION] |
15 | 17 | # |
16 | 18 | # (The uppercase quantities should be replaced by actual values.) |
17 | 19 | # DATABASE can be "all", "sameuser", "samegroup", a database name (or |
18 | 20 | # a comma-separated list thereof), or a file name prefixed with "@". |
19 | 21 | # USER can be "all", an actual user name or a group name prefixed with |
20 | 22 | # "+" or a list containing either. IP-ADDRESS and IP-MASK specify the |
21 | | -# set of hosts the record matches. METHOD can be "trust", "reject", |
| 23 | +# set of hosts the record matches. CIDR-MASK is an integer between 0 |
| 24 | +# and 32 (IPv6) or 128(IPv6) inclusive, that specifies the number of |
| 25 | +# significant bits in the mask, so an IPv4 CIDR-MASK of 8 is equivalent |
| 26 | +# to an IP-MASK of 255.0.0.0, and an IPv6 CIDR-MASK of 64 is equivalent |
| 27 | +# to an IP-MASK of ffff:ffff:ffff:ffff::. METHOD can be "trust", "reject", |
22 | 28 | # "md5", "crypt", "password", "krb4", "krb5", "ident", or "pam". Note |
23 | 29 | # that "password" uses clear-text passwords; "md5" is preferred for |
24 | 30 | # encrypted passwords. OPTION is the ident map or the name of the PAM |
|