index 553d0318f46f8d990f8e7a461ebbfab5d0b7aa29..896208d568bca39e9feff41c99cba9fe6251bad2 100644 (file)
-<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.606 2009年03月27日 02:25:04 momjian Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.607 2009年03月27日 11:58:21 mha Exp $ -->
<!--
Typical markup:
Parse pg_hba.conf in the postmaster so errors are reported on reload
(Magnus)
</para>
+
+ <para>
+ Previously errors in the file wouldn't be detected until clients tried
+ to connect, which could leave the system with a broken file loaded.
+ </para>
</listitem>
<listitem>
<para>
- Make pg_hba.conf "sameuser" an optional argument for ident
- authentication (Magnus)
+ Remove "sameuser" option from pg_hba.conf, making it the default if
+ no usermap is specified (Magnus)
</para>
</listitem>
settings (Magnus)
</para>
</listitem>
+
+ <listitem>
+ <para>
+ Allow usermap parameter in pg_hba.conf for all external authentication
+ methods (Magnus)
+ </para>
+
+ <para>
+ Previously this was only supported for ident authentication.
+ </para>
<listitem>
<para>
</para>
<para>
- Previously SSL certificates could only authenticate hosts, not users.
+ Previously SSL certificates could only verify that the client had access
+ to a certificate, not authenticate a user.
</para>
</listitem>
<para>
This allows identical usernames from different realms to be
- authenticated as different database users. bjm: correct?
+ authenticated as different database users using usermaps.
</para>
</listitem>
<listitem>
<para>
- Issue a warning rather than shut down when pg_hba.conf can't be loaded
- (Selena Deckelmann)
+ Show all parsing errors in pg_hba.conf instead of aborting after the
+ first one (Selena Deckelmann)
</para>
</listitem>