1
0
mirror of https://github.com/postgres/postgres.git synced 2025-07-28 23:42:10 +03:00

PAM authentication:

> pam_strerror() should be used a few more times, rather than just saying
> "Error!".  Also, the configure.in snippet seems wrong.  You add
> -I$pam_prefix/include/security to $INCLUDES and then you #include
> <security/pam_appl.h>.  This whole thing is probably unnecessary, since
> PAM is a system library on the systems where it exists, so the headers
> and libraries are found automatically, unlike OpenSSL and
> Kerberos.

See attached revised patch. (I'm sure the configure.in stuff can be done
right/better, I'm just not enough of a autoconf guru to know what to
change it to.)

Dominic J. Eidson
This commit is contained in:
Bruce Momjian
2001-09-06 03:23:38 +00:00
parent 2a34134b6c
commit 04c1f72920
7 changed files with 290 additions and 17 deletions

View File

@ -1,4 +1,4 @@
<!-- $Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.17 2001/08/16 16:24:15 momjian Exp $ -->
<!-- $Header: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v 1.18 2001/09/06 03:23:38 momjian Exp $ -->
<chapter id="client-authentication">
<title>Client Authentication</title>
@ -278,6 +278,27 @@ hostssl <replaceable>database</replaceable> <replaceable>IP-address</replaceable
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>pam</term>
<listitem>
<para>
This authentication type operates similar to
<firstterm>password</firstterm>, with the main difference that
it will use PAM (Pluggable Authentication Modules) as the
authentication mechanism. The <replaceable>authentication
option</replaceable> following the <literal>pam</> keyword
specifies the service name that will be passed to PAM. The
default service name is <firstterm>postgresql</firstterm>.
For more information about PAM, please read <ulink
url="http://www.kernel.org/pub/linux/libs/pam/">Linux-PAM
Page</ulink> and <ulink
url="http://www.sun.com/software/solaris/pam/">Solaris-PAM
Page</ulink>.
</para>
</listitem>
</varlistentry>
</variablelist>
</para>