pg.ddx.io  pgsql-docs@postgresql.org mailing list archive  

help / color / mirror / Atom feed

ERROR: (host) should be replaced by (hostnogssenc).
2+ messages / 2 participants
[nested] [flat]

* ERROR: (host) should be replaced by (hostnogssenc).
@ 2020-05-24 12:44  PG Doc comments form <noreply@postgresql.org>
  0 siblings, 1 reply; 2+ messages in thread

From: PG Doc comments form @ 2020-05-24 12:44 UTC (permalink / raw)
  To: pgsql-docs@lists.postgresql.org; +Cc: rajkumar820999@gmail.com

The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/12/encryption-options.html
Description:

Chapter 18. Server Setup and Operation
18.8. Encryption Options

Under the topic "Encrypting Data Across A Network", I think there seems to
be a documentation error.

ERROR: (host) should be replaced by (hostnogssenc).

The pg_hba.conf file allows administrators to specify which hosts can use
non-encrypted connections (host) and which require GSSAPI-encrypted
connections (hostgssenc). Also, clients can specify that they connect to
servers only on GSSAPI-encrypted connections (gssencmode=require).

Thanks,
Raj Kumar


^ permalink  raw  reply  [nested|flat] 2+ messages in thread

* Re: ERROR: (host) should be replaced by (hostnogssenc).
@ 2020-05-24 16:07  Tom Lane <tgl@sss.pgh.pa.us>
  parent: PG Doc comments form <noreply@postgresql.org>
  0 siblings, 0 replies; 2+ messages in thread

From: Tom Lane @ 2020-05-24 16:07 UTC (permalink / raw)
  To: rajkumar820999@gmail.com; +Cc: pgsql-docs@lists.postgresql.org

PG Doc comments form <noreply@postgresql.org> writes:
> Under the topic "Encrypting Data Across A Network", I think there seems to
> be a documentation error.

> ERROR: (host) should be replaced by (hostnogssenc).

> The pg_hba.conf file allows administrators to specify which hosts can use
> non-encrypted connections (host) and which require GSSAPI-encrypted
> connections (hostgssenc). Also, clients can specify that they connect to
> servers only on GSSAPI-encrypted connections (gssencmode=require).

I think it's correct as it stands.  hostnogssenc would have the semantics
"hosts that MUST use non-encrypted connections".

If that were actually a useful option, maybe it would be worth lengthening
this description to mention all three options ... but it seems OK as-is to
me.

			regards, tom lane





^ permalink  raw  reply  [nested|flat] 2+ messages in thread

end of thread, other threads:[~2020-05-24 16:07 UTC | newest]

Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2020-05-24 12:44 ERROR: (host) should be replaced by (hostnogssenc). PG Doc comments form <noreply@postgresql.org>
2020-05-24 16:07 ` Tom Lane <tgl@sss.pgh.pa.us>

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox