PG Doc comments form <nore...@postgresql.org> writes:
> Under the topic "Encrypting Data Across A Network", I think there seems to
> be a documentation error.

> ERROR: (host) should be replaced by (hostnogssenc).

> The pg_hba.conf file allows administrators to specify which hosts can use
> non-encrypted connections (host) and which require GSSAPI-encrypted
> connections (hostgssenc). Also, clients can specify that they connect to
> servers only on GSSAPI-encrypted connections (gssencmode=require).

I think it's correct as it stands.  hostnogssenc would have the semantics
"hosts that MUST use non-encrypted connections".

If that were actually a useful option, maybe it would be worth lengthening
this description to mention all three options ... but it seems OK as-is to
me.

                        regards, tom lane


Reply via email to