@@ -159,17 +159,19 @@ ____________________________________________________________________________-->
159
159
160
160
<!--==========================orignal english content==========================
161
161
<para>
162
- A record can have one of the seven formats
162
+ A record can have several formats:
163
163
<synopsis>
164
- local <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
165
- host <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
166
- hostssl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
167
- hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
168
- host <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
169
- hostssl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
170
- hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
171
- hostgssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
172
- hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
164
+ local <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
165
+ host <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
166
+ hostssl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
167
+ hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
168
+ hostgssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
169
+ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
170
+ host <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
171
+ hostssl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
172
+ hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
173
+ hostgssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
174
+ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
173
175
</synopsis>
174
176
The meaning of the fields is as follows:
175
177
@@ -416,8 +418,7 @@ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable
416
418
</para>
417
419
418
420
<para>
419
- This field only applies to <literal>host</literal>,
420
- <literal>hostssl</literal>, and <literal>hostnossl</literal> records.
421
+ These fields do not apply to <literal>local</literal> records.
421
422
</para>
422
423
423
424
<note>
@@ -469,8 +470,7 @@ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable
469
470
</para>
470
471
471
472
<para>
472
- These fields only apply to <literal>host</literal>,
473
- <literal>hostssl</literal>, and <literal>hostnossl</literal> records.
473
+ These fields do not apply to <literal>local</literal> records.
474
474
</para>
475
475
</listitem>
476
476
</varlistentry>
@@ -682,17 +682,19 @@ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable
682
682
</para>
683
683
____________________________________________________________________________-->
684
684
<para>
685
- 记录可以是下面七种格式之一 :
685
+ 记录可以有多种格式 :
686
686
<synopsis>
687
- local <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
688
- host <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
689
- hostssl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
690
- hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
691
- host <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
692
- hostssl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
693
- hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
694
- hostgssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
695
- hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
687
+ local <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
688
+ host <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
689
+ hostssl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
690
+ hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
691
+ hostgssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
692
+ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>address</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
693
+ host <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
694
+ hostssl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
695
+ hostnossl <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
696
+ hostgssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
697
+ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable> <replaceable>IP-address</replaceable> <replaceable>IP-mask</replaceable> <replaceable>auth-method</replaceable> <optional><replaceable>auth-options</replaceable></optional>
696
698
</synopsis>
697
699
各个域的含义如下:
698
700
@@ -851,8 +853,7 @@ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable
851
853
</para>
852
854
853
855
<para>
854
- 这个域只适用于<literal>host</literal>、
855
- <literal>hostssl</literal>和<literal>hostnossl</literal>记录。
856
+ 这个域不适用于<literal>local</literal>记录。
856
857
</para>
857
858
858
859
<note>
@@ -888,7 +889,7 @@ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceable
888
889
</para>
889
890
890
891
<para>
891
- 这些域只适用于 <literal>host</literal>、<literal>hostssl</literal>和<literal>hostnossl </literal>记录。
892
+ 这些域不适用于 <literal>local </literal>记录。
892
893
</para>
893
894
</listitem>
894
895
</varlistentry>
@@ -3484,19 +3485,15 @@ ____________________________________________________________________________-->
3484
3485
3485
3486
<!--==========================orignal english content==========================
3486
3487
<para>
3487
- In a <filename>pg_hba.conf</filename> record specifying certificate
3488
- authentication, the authentication option <literal>clientcert</literal> is
3489
- assumed to be <literal>verify-ca</literal> or <literal>verify-full</literal>,
3490
- and it cannot be turned off since a client certificate is necessary for this
3491
- method. What the <literal>cert</literal> method adds to the basic
3492
- <literal>clientcert</literal> certificate validity test is a check that the
3493
- <literal>cn</literal> attribute matches the database user name.
3488
+ It is redundant to use the <literal>clientcert</literal> option with
3489
+ <literal>cert</literal> authentication because <literal>cert</literal>
3490
+ authentication is effectively <literal>trust</literal> authentication
3491
+ with <literal>clientcert=verify-full</literal>.
3494
3492
</para>
3495
3493
____________________________________________________________________________-->
3496
3494
<para>
3497
- 在一条指定证书认证的<filename>pg_hba.conf</filename>记录中,认证选项<literal>clientcert</literal>被假定为<literal>verify-ca</literal>或<literal>verify-full</literal>,
3498
- 并且它不能被关掉,因为在这种方法中客户端证书是必需的。
3499
- <literal>cert</literal>方法增加到基本<literal>clientcert</literal>证书有效性测试是一个<literal>cn</literal>属性匹配数据库用户名的检查。
3495
+ 将 <literal>clientcert</literal> 选项与 <literal>cert</literal>验证一起使用是多余的,
3496
+ 因为 <literal>cert</literal>身份验证是经过<literal>clientcert=verify-full</literal>的有效的 <literal>trust</literal> 验证。
3500
3497
</para>
3501
3498
</sect1>
3502
3499
0 commit comments