Addition added to PAM documentation. Patch attached and will appear in
8.0.3.
---------------------------------------------------------------------------
Dick Davies wrote:
> * Adrian Nida <nida@xxxxxxxx> [0307 18:07]:
> > <Snip/>
> > >>Here is my attempt at doing so: http://itc.musc.edu/wiki/PostGreSQL
> > <Snip/>
> > >I get a "not exists" error on that URL.
> > Sorry, I renamed the URL after someone pointed out the correct spelling.
> > This was a link to the old one. I apologize for the confusion, the
> > right URL is:
> >
> > http://itc.musc.edu/wiki/PostgreSQL
> >
> > >I assume you looked at:
> > > http://www.postgresql.org/docs/8.0/interactive/auth-methods.html#AUTH-PAM
> > >Do you have additions to it?
> >
> > Yes, I did look at it. No offense to the original author, but my doc
> > has a lot more than the four sentences that are there. I was hoping it
> > would help others in my situation. Again any and all
> > comments/questions/blah are appreciated.
>
> I think the point he's trying to make is that most of your howto is
> how to setup pg_hba.conf (which is in the docs anyway) and how to set up pam_ldap
> for a service (which is really a pam howto).
>
> It'd be nice if the docs at
>
> http://www.postgresql.org/docs/8.0/interactive/auth-methods.html#AUTH-PAM
>
> said
>
> 'you need to createuser(8) a postgres user too. PAM is only used to
> validate a username/password pair - the user has to exist in postgres as well.'
>
> and it will, once it updates :)
>
>
>
> --
> 'When the door hits you in the ass on the way out, clean off the smudge
> your ass leaves, please'
> -- Alien loves Predator
> Rasputin :: Jack of All Trades - Master of Nuns
>
> ---------------------------(end of broadcast)---------------------------
> TIP 7: don't forget to increase your free space map settings
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@xxxxxxxxxxxxxxxx | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073
Index: doc/src/sgml/client-auth.sgml
===================================================================
RCS file: /cvsroot/pgsql/doc/src/sgml/client-auth.sgml,v
retrieving revision 1.76
diff -c -c -r1.76 client-auth.sgml
*** doc/src/sgml/client-auth.sgml 22 Apr 2005 04:18:58 -0000 1.76
--- doc/src/sgml/client-auth.sgml 26 Apr 2005 02:50:34 -0000
***************
*** 883,890 ****
default PAM service name is <literal>postgresql</literal>. You can
optionally supply your own service name after the <literal>pam</>
key word in the file <filename>pg_hba.conf</filename>.
! For more information about PAM, please read the
! <ulink url="http://www.kernel.org/pub/linux/libs/pam/";>
<productname>Linux-PAM</> Page</ulink>
and the <ulink url="http://www.sun.com/software/solaris/pam/";>
<systemitem class="osname">Solaris</> PAM Page</ulink>.
--- 883,892 ----
default PAM service name is <literal>postgresql</literal>. You can
optionally supply your own service name after the <literal>pam</>
key word in the file <filename>pg_hba.conf</filename>.
! PAM is used only to validate username/password pairs.
! The user must already exist in the database before PAM
! can be used for authentication. For more information about
! PAM, please read the <ulink url="http://www.kernel.org/pub/linux/libs/pam/";>
<productname>Linux-PAM</> Page</ulink>
and the <ulink url="http://www.sun.com/software/solaris/pam/";>
<systemitem class="osname">Solaris</> PAM Page</ulink>.
