From: Tom Lane <tgl@sss.pgh.pa.us>
To: rajkumar820999@gmail.com
Cc: pgsql-docs@lists.postgresql.org
Subject: Re: ERROR: (host) should be replaced by (hostnogssenc).
Date: Sun, 24 May 2020 12:07:04 -0400
Message-ID: <7753.1590336424@sss.pgh.pa.us> (raw)
In-Reply-To: <159032426170.7030.13897325525866864814@wrigleys.postgresql.org>
References: <159032426170.7030.13897325525866864814@wrigleys.postgresql.org>
PG Doc comments form <noreply@postgresql.org> writes:
> Under the topic "Encrypting Data Across A Network", I think there seems to
> be a documentation error.
> ERROR: (host) should be replaced by (hostnogssenc).
> The pg_hba.conf file allows administrators to specify which hosts can use
> non-encrypted connections (host) and which require GSSAPI-encrypted
> connections (hostgssenc). Also, clients can specify that they connect to
> servers only on GSSAPI-encrypted connections (gssencmode=require).
I think it's correct as it stands. hostnogssenc would have the semantics
"hosts that MUST use non-encrypted connections".
If that were actually a useful option, maybe it would be worth lengthening
this description to mention all three options ... but it seems OK as-is to
me.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: tgl@sss.pgh.pa.us, rajkumar820999@gmail.com, pgsql-docs@lists.postgresql.org
Subject: Re: ERROR: (host) should be replaced by (hostnogssenc).
In-Reply-To: <7753.1590336424@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox