diff options
| author | Magnus Hagander <magnus@hagander.net> | 2007-07-23 10:16:54 +0000 |
|---|---|---|
| committer | Magnus Hagander <magnus@hagander.net> | 2007-07-23 10:16:54 +0000 |
| commit | f70866fb2353dba162fc296f644e7ce77af6d79f (patch) | |
| tree | b061ad6406fcd27c42b2fb3c210925c7b11dfb33 /doc/src/sgml/client-auth.sgml | |
| parent | a0dab332a2e1961f45b38b23bd428859621e6f3c (diff) | |
| download | postgresql-f70866fb2353dba162fc296f644e7ce77af6d79f.tar.gz | |
SSPI authentication on Windows. GSSAPI compatible client when doing Kerberos
against a Unix server, and Windows-specific server-side authentication
using SSPI "negotiate" method (Kerberos or NTLM).
Only builds properly with MSVC for now.
Diffstat (limited to 'doc/src/sgml/client-auth.sgml')
| -rw-r--r-- | doc/src/sgml/client-auth.sgml | 40 |
1 files changed, 39 insertions, 1 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index e3fa1c8b27..dd3bd8be4d 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -1,4 +1,4 @@ -<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.99 2007/07/18 12:00:47 mha Exp $ --> +<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.100 2007/07/23 10:16:53 mha Exp $ --> <chapter id="client-authentication"> <title>Client Authentication</title> @@ -359,6 +359,17 @@ hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> </varlistentry> <varlistentry> + <term><literal>sspi</></term> + <listitem> + <para> + Use SSPI to authenticate the user. This is only + available on Windows. See <xref + linkend="sspi-auth"> for details. + </para> + </listitem> + </varlistentry> + + <varlistentry> <term><literal>krb5</></term> <listitem> <para> @@ -677,6 +688,33 @@ local db1,db2,@demodbs all md5 </sect2> + <sect2 id="sspi-auth"> + <title>SSPI authentication</title> + + <indexterm zone="sspi-auth"> + <primary>SSPI</primary> + </indexterm> + + <para> + <productname>SSPI</productname> is a <productname>Windows</productname> + technology for secure authentication with single sign-on. + <productname>PostgreSQL</productname> will use SSPI in + <literal>negotiate</literal> mode, which will use + <productname>Kerberos</productname> when possible and automatically + fall back to <productname>NTLM</productname> in other cases. + <productname>SSPI</productname> authentication only works when both + server and client are running <productname>Windows</productname>. + </para> + + <para> + When using <productname>Kerberos</productname> authentication, + <productname>SSPI</productname> works the same way + <productname>GSSAPI</productname> does. See <xref linkend="gssapi-auth"> + for details. + </para> + + </sect2> + <sect2 id="kerberos-auth"> <title>Kerberos authentication</title> |