diff options
| author | Bruce Momjian <bruce@momjian.us> | 2023-10-10 16:51:08 -0400 |
|---|---|---|
| committer | Bruce Momjian <bruce@momjian.us> | 2023-10-10 16:51:08 -0400 |
| commit | e6b41d5682d98c498827f1c17aa3b115c1dde961 (patch) | |
| tree | 77dcac99066102f46ddfb20ef59361409edb79fb | |
| parent | 02a111bc2056e3edaf762d77a5d428cef97ecfcb (diff) | |
| download | postgresql-e6b41d5682d98c498827f1c17aa3b115c1dde961.tar.gz postgresql-e6b41d5682d98c498827f1c17aa3b115c1dde961.zip | |
doc: clarify that SSPI and GSSAPI are interchangeable
Reported-by: tpo_deb@sourcepole.ch
Discussion: https://postgr.es/m/167846222574.1803490.15815104179136215862@wrigleys.postgresql.org
Backpatch-through: 11
| -rw-r--r-- | doc/src/sgml/client-auth.sgml | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index 475683fa440..246d8825a79 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -1361,10 +1361,12 @@ omicron bryanh guest1 <literal>negotiate</literal> mode, which will use <productname>Kerberos</productname> when possible and automatically fall back to <productname>NTLM</productname> in other cases. - <productname>SSPI</productname> authentication only works when both - server and client are running <productname>Windows</productname>, - or, on non-Windows platforms, when <productname>GSSAPI</productname> - is available. + <productname>SSPI</productname> and <productname>GSSAPI</productname> + interoperate as clients and servers, e.g., an + <productname>SSPI</productname> client can authenticate to an + <productname>GSSAPI</productname> server. It is recommended to use + <productname>SSPI</productname> on Windows clients and servers and + <productname>GSSAPI</productname> on non-Windows platforms. </para> <para> |