From 6eb9c5a5657d1fe77b55cc261450f3538d35a94d Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sat, 4 May 2024 14:19:15 +0200 Subject: Adding upstream version 13.4. Signed-off-by: Daniel Baumann --- doc/src/sgml/html/gssapi-enc.html | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 doc/src/sgml/html/gssapi-enc.html (limited to 'doc/src/sgml/html/gssapi-enc.html') diff --git a/doc/src/sgml/html/gssapi-enc.html b/doc/src/sgml/html/gssapi-enc.html new file mode 100644 index 0000000..84f829c --- /dev/null +++ b/doc/src/sgml/html/gssapi-enc.html @@ -0,0 +1,31 @@ + +18.10. Secure TCP/IP Connections with GSSAPI Encryption
18.10. Secure TCP/IP Connections with GSSAPI Encryption
Prev UpChapter 18. Server Setup and OperationHome Next

18.10. Secure TCP/IP Connections with GSSAPI Encryption

18.10.1. Basic Setup

+ PostgreSQL also has native support for + using GSSAPI to encrypt client/server communications for + increased security. Support requires that a GSSAPI + implementation (such as MIT Kerberos) is installed on both client and server + systems, and that support in PostgreSQL is + enabled at build time (see Chapter 16). +

18.10.1. Basic Setup

+ The PostgreSQL server will listen for both + normal and GSSAPI-encrypted connections on the same TCP + port, and will negotiate with any connecting client whether to + use GSSAPI for encryption (and for authentication). By + default, this decision is up to the client (which means it can be + downgraded by an attacker); see Section 20.1 about + setting up the server to require the use of GSSAPI for + some or all connections. +

+ When using GSSAPI for encryption, it is common to + use GSSAPI for authentication as well, since the + underlying mechanism will determine both client and server identities + (according to the GSSAPI implementation) in any + case. But this is not required; + another PostgreSQL authentication method + can be chosen to perform additional verification. +

+ Other than configuration of the negotiation + behavior, GSSAPI encryption requires no setup beyond + that which is necessary for GSSAPI authentication. (For more information + on configuring that, see Section 20.6.) +

Prev Up Next
18.9. Secure TCP/IP Connections with SSL Home 18.11. Secure TCP/IP Connections with SSH Tunnels
\ No newline at end of file -- cgit v1.2.3