{"kind": "auth", "major": "18", "item": {"slug": "gss", "name": "gss", "name_zh": "", "category": "\u8eab\u4efd\u8ba4\u8bc1\u4e0e\u8bbf\u95ee\u63a7\u5236", "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "aliases": [], "content_hash": "ae88d45eb1e4b69e3aa79a95c7bc83927d7cefe10ba5e7e012d9f64c44695501", "versions": {"10": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u5728\u7cfb\u7edf\u7528\u6237\u540d\u4e0e\u6570\u636e\u5e93\u7528\u6237\u540d\u4e4b\u95f4\u5efa\u7acb\u6620\u5c04\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e username@EXAMPLE.COM \uff08\u6216\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\u8fd9\u6837\u7684 GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u6620\u5c04\u6240\u7528\u7684\u7528\u6237\u540d\u662f username@EXAMPLE.COM \uff08\u6216\u76f8\u5e94\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5c06 include_realm \u8bbe\u4e3a 0\uff0c\u6b64\u65f6\u6620\u5c04\u6240\u89c1\u7684\u7cfb\u7edf\u7528\u6237\u540d\u4e3a username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v10.23/postgresql-10.23.tar.bz2", "label": "10.23", "major": "10", "channel": "historical", "revision": "94a4b2528372458e5662c18d406629266667c437198160a18cdfd2c4a4d6eee9", "source_sha256": "94a4b2528372458e5662c18d406629266667c437198160a18cdfd2c4a4d6eee9", "catalog_fingerprint": "691be281b476dde4374d7f805b2bacc2e75bdef40f1e9d3d42e91f97fe95cfd0"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v10.23/postgresql-10.23.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "94a4b2528372458e5662c18d406629266667c437198160a18cdfd2c4a4d6eee9"}, {"url": "/docs/10/auth-methods.html#GSSAPI-AUTH", "path": "auth-methods.html", "label": "PostgreSQL 10 English manual", "sha256": "856d36a3fdfe8c45a25832e49bd07e9b7480f2ff9a33e58ac7c392630149bc34"}, {"url": "/docs/10/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 10 English manual", "sha256": "04fed609a50e8fd3013ffebb83039c544d39b6c73a6c2b2e23cd7864a70b42da"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/10/auth-methods.html#GSSAPI-AUTH", "anchor": "GSSAPI-AUTH", "locale": "zh-Hans", "version": "10", "build_id": 63, "page_key": "auth-methods.html", "extraction": "concept-introduction", "source_hash": "8fb4c6dc36608a9ecf52bdf7b36e63ea678b09c7cb90191e4752e62ba5911e49", "fragment_sha256": "3210101db8cb7b26ef20b64b5b802c528356c0e879f88a5a771a7df3b9f312aa", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:62997ea80516ad012fbf6359de33f3b016b54c47e2df76e75606116b4baaf8e5", "translated_from_revision": null}, "body_sha256": "975a6ee72317d9f56fed9ea60384bc8a6e58083eabb787d706b6183b3d4210ab", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "94a4b2528372458e5662c18d406629266667c437198160a18cdfd2c4a4d6eee9"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "10", "text_hash": "1f389b279f8fce72d931f9cff1f2bdbfe4b4c4d18f638658e8bb4e9ad36b2829", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "94a4b2528372458e5662c18d406629266667c437198160a18cdfd2c4a4d6eee9"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u5728\u7cfb\u7edf\u7528\u6237\u540d\u4e0e\u6570\u636e\u5e93\u7528\u6237\u540d\u4e4b\u95f4\u5efa\u7acb\u6620\u5c04\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e username@EXAMPLE.COM \uff08\u6216\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\u8fd9\u6837\u7684 GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u6620\u5c04\u6240\u7528\u7684\u7528\u6237\u540d\u662f username@EXAMPLE.COM \uff08\u6216\u76f8\u5e94\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5c06 include_realm \u8bbe\u4e3a 0\uff0c\u6b64\u65f6\u6620\u5c04\u6240\u89c1\u7684\u7cfb\u7edf\u7528\u6237\u540d\u4e3a username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/10/auth-methods.html#GSSAPI-AUTH", "anchor": "GSSAPI-AUTH", "locale": "zh-Hans", "version": "10", "build_id": 63, "page_key": "auth-methods.html", "extraction": "concept-introduction", "source_hash": "8fb4c6dc36608a9ecf52bdf7b36e63ea678b09c7cb90191e4752e62ba5911e49", "fragment_sha256": "3210101db8cb7b26ef20b64b5b802c528356c0e879f88a5a771a7df3b9f312aa", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:62997ea80516ad012fbf6359de33f3b016b54c47e2df76e75606116b4baaf8e5", "translated_from_revision": null}, "body_sha256": "975a6ee72317d9f56fed9ea60384bc8a6e58083eabb787d706b6183b3d4210ab", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "94a4b2528372458e5662c18d406629266667c437198160a18cdfd2c4a4d6eee9"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p><span class=\"productname\">GSSAPI</span> \u662f RFC 2743 \u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u6309\u7167 RFC 1964 \u652f\u6301\u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u8ba4\u8bc1\u7684 <span class=\"productname\">GSSAPI</span>\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u8fc7\u7a0b\u672c\u8eab\u662f\u5b89\u5168\u7684\uff0c\u4f46\u9664\u975e\u4f7f\u7528 <acronym class=\"acronym\">SSL</acronym>\uff0c\u5426\u5219\u6570\u636e\u5e93\u8fde\u63a5\u4e0a\u4f20\u8f93\u7684\u6570\u636e\u4e0d\u4f1a\u52a0\u5bc6\u3002</p><p>    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/10/installation.html\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p><span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u91c7\u7528\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code> \u7684\u6807\u51c6\u4e3b\u4f53\u3002PostgreSQL \u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u6240\u7528 keytab \u4e2d\u5305\u542b\u7684\u4efb\u4f55\u4e3b\u4f53\uff0c\u4f46\u5ba2\u6237\u7aef\u5efa\u7acb\u8fde\u63a5\u65f6\uff0c\u5fc5\u987b\u6ce8\u610f\u901a\u8fc7 <code class=\"literal\">krbsrvname</code> \u8fde\u63a5\u53c2\u6570\u6307\u5b9a\u6b63\u786e\u7684\u4e3b\u4f53\u4fe1\u606f\u3002\uff08\u53e6\u89c1<a class=\"xref\" href=\"/zh/docs/10/libpq.html#LIBPQ-PARAMKEYWORDS\">\u7b2c\u00a033.1.2\u00a0\u8282</a>\u3002\uff09\u6784\u5efa\u65f6\u53ef\u4ee5\u4f7f\u7528 <code class=\"literal\">./configure --with-krb-srvnam=</code><em class=\"replaceable\"><code>whatever</code></em>\uff0c\u5c06\u5b89\u88c5\u9ed8\u8ba4\u503c\u4ece <code class=\"literal\">postgres</code> \u6539\u4e3a\u5176\u4ed6\u503c\u3002\u5728\u5927\u591a\u6570\u73af\u5883\u4e2d\uff0c\u65e0\u9700\u66f4\u6539\u6b64\u53c2\u6570\u3002\u67d0\u4e9b Kerberos \u5b9e\u73b0\u53ef\u80fd\u8981\u6c42\u4e0d\u540c\u7684\u670d\u52a1\u540d\uff0c\u4f8b\u5982 Microsoft Active Directory \u8981\u6c42\u670d\u52a1\u540d\u4f7f\u7528\u5927\u5199\uff08<code class=\"literal\">POSTGRES</code>\uff09\u3002</p><p><em class=\"replaceable\"><code>hostname</code></em> \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002\u670d\u52a1\u4e3b\u4f53\u7684 realm \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u9996\u9009 realm\u3002</p><p><a href=\"/zh/docs/10/auth-methods.html#GSSAPI-AUTH\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "10", "link_map": {"/zh/docs/10/installation.html": "/docs/10/installation.html", "/zh/docs/10/auth-methods.html#GSSAPI-AUTH": "/docs/10/auth-methods.html#GSSAPI-AUTH", "/zh/docs/10/libpq.html#LIBPQ-PARAMKEYWORDS": "/docs/10/libpq.html#LIBPQ-PARAMKEYWORDS"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p><span>GSSAPI</span> \u662f RFC 2743 \u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u6309\u7167 RFC 1964 \u652f\u6301\u4f7f\u7528 <span>Kerberos</span> \u8ba4\u8bc1\u7684 <span>GSSAPI</span>\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u8fc7\u7a0b\u672c\u8eab\u662f\u5b89\u5168\u7684\uff0c\u4f46\u9664\u975e\u4f7f\u7528 <acronym>SSL</acronym>\uff0c\u5426\u5219\u6570\u636e\u5e93\u8fde\u63a5\u4e0a\u4f20\u8f93\u7684\u6570\u636e\u4e0d\u4f1a\u52a0\u5bc6\u3002</p><p>    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/10/installation.html\" rel=\"nofollow\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p><span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u91c7\u7528\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code> \u7684\u6807\u51c6\u4e3b\u4f53\u3002PostgreSQL \u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u6240\u7528 keytab \u4e2d\u5305\u542b\u7684\u4efb\u4f55\u4e3b\u4f53\uff0c\u4f46\u5ba2\u6237\u7aef\u5efa\u7acb\u8fde\u63a5\u65f6\uff0c\u5fc5\u987b\u6ce8\u610f\u901a\u8fc7 <code>krbsrvname</code> \u8fde\u63a5\u53c2\u6570\u6307\u5b9a\u6b63\u786e\u7684\u4e3b\u4f53\u4fe1\u606f\u3002\uff08\u53e6\u89c1<a href=\"/zh/docs/10/libpq.html#LIBPQ-PARAMKEYWORDS\" rel=\"nofollow\">\u7b2c\u00a033.1.2\u00a0\u8282</a>\u3002\uff09\u6784\u5efa\u65f6\u53ef\u4ee5\u4f7f\u7528 <code>./configure --with-krb-srvnam=</code><em><code>whatever</code></em>\uff0c\u5c06\u5b89\u88c5\u9ed8\u8ba4\u503c\u4ece <code>postgres</code> \u6539\u4e3a\u5176\u4ed6\u503c\u3002\u5728\u5927\u591a\u6570\u73af\u5883\u4e2d\uff0c\u65e0\u9700\u66f4\u6539\u6b64\u53c2\u6570\u3002\u67d0\u4e9b Kerberos \u5b9e\u73b0\u53ef\u80fd\u8981\u6c42\u4e0d\u540c\u7684\u670d\u52a1\u540d\uff0c\u4f8b\u5982 Microsoft Active Directory \u8981\u6c42\u670d\u52a1\u540d\u4f7f\u7528\u5927\u5199\uff08<code>POSTGRES</code>\uff09\u3002</p><p><em><code>hostname</code></em> \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002\u670d\u52a1\u4e3b\u4f53\u7684 realm \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u9996\u9009 realm\u3002</p><p><a href=\"/zh/docs/10/auth-methods.html#GSSAPI-AUTH\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "3882ea5e0ba36c597db49836a385d3d98f04dec1c9ac6759b60718019c41bacf", "content_hash": "1f389b279f8fce72d931f9cff1f2bdbfe4b4c4d18f638658e8bb4e9ad36b2829", "source_database": "center", "source_revision": "94a4b2528372458e5662c18d406629266667c437198160a18cdfd2c4a4d6eee9"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u5728\u7cfb\u7edf\u7528\u6237\u540d\u4e0e\u6570\u636e\u5e93\u7528\u6237\u540d\u4e4b\u95f4\u5efa\u7acb\u6620\u5c04\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e username@EXAMPLE.COM \uff08\u6216\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\u8fd9\u6837\u7684 GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u6620\u5c04\u6240\u7528\u7684\u7528\u6237\u540d\u662f username@EXAMPLE.COM \uff08\u6216\u76f8\u5e94\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5c06 include_realm \u8bbe\u4e3a 0\uff0c\u6b64\u65f6\u6620\u5c04\u6240\u89c1\u7684\u7cfb\u7edf\u7528\u6237\u540d\u4e3a username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/10/auth-methods.html#GSSAPI-AUTH", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/10/auth-methods.html", "method": "same-major semantic node", "sha256": "128b4f29cf06d6bde5b9e357daacb6d538044ee392e4aece0e31c90b0a37b647", "language": "zh", "matched_nodes": ["#AUTH-METHODS/div[1]/dl[0]/dt[2]", "#AUTH-METHODS/div[5]/div[13]/dl[0]/dd[1]", "#AUTH-METHODS/div[5]/div[13]/dl[0]/dd[3]", "#AUTH-METHODS/div[5]/div[13]/dl[0]/dd[5]", "#AUTH-METHODS/div[5]/p[11]", "#AUTH-METHODS/div[5]/p[12]", "#AUTH-METHODS/div[5]/p[3]", "#AUTH-METHODS/div[5]/p[5]", "#AUTH-METHODS/div[5]/p[6]", "#AUTH-METHODS/div[5]/p[8]", "#AUTH-METHODS/div[5]/p[9]"]}], "language": "zh", "original_text": {"/versions/10/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.3.3 for details.", "/versions/10/facts/0/label": "Method", "/versions/10/facts/1/label": "Configuration", "/versions/10/facts/2/label": "Inventory", "/versions/10/facts/2/value": "User-visible source authentication method", "/versions/10/tables/0/title": "Documented method options and alternatives", "/versions/10/tables/0/columns/0/label": "Option or term", "/versions/10/tables/0/columns/1/label": "Meaning", "/versions/10/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/10/tables/0/rows/1/description": "Allows for mapping between system and database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/10/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "f1b102ccc72a34c1025eb79dafdd4f1ffe63847c2c2fbf8fa44dcc1ce46c0c0a", "canonical_center_text_hash": "1f389b279f8fce72d931f9cff1f2bdbfe4b4c4d18f638658e8bb4e9ad36b2829"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p><span>GSSAPI</span> \u662f RFC 2743 \u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u6309\u7167 RFC 1964 \u652f\u6301\u4f7f\u7528 <span>Kerberos</span> \u8ba4\u8bc1\u7684 <span>GSSAPI</span>\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u8fc7\u7a0b\u672c\u8eab\u662f\u5b89\u5168\u7684\uff0c\u4f46\u9664\u975e\u4f7f\u7528 <acronym>SSL</acronym>\uff0c\u5426\u5219\u6570\u636e\u5e93\u8fde\u63a5\u4e0a\u4f20\u8f93\u7684\u6570\u636e\u4e0d\u4f1a\u52a0\u5bc6\u3002</p><p>    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/10/installation.html\" rel=\"nofollow\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p><span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u91c7\u7528\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code> \u7684\u6807\u51c6\u4e3b\u4f53\u3002PostgreSQL \u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u6240\u7528 keytab \u4e2d\u5305\u542b\u7684\u4efb\u4f55\u4e3b\u4f53\uff0c\u4f46\u5ba2\u6237\u7aef\u5efa\u7acb\u8fde\u63a5\u65f6\uff0c\u5fc5\u987b\u6ce8\u610f\u901a\u8fc7 <code>krbsrvname</code> \u8fde\u63a5\u53c2\u6570\u6307\u5b9a\u6b63\u786e\u7684\u4e3b\u4f53\u4fe1\u606f\u3002\uff08\u53e6\u89c1<a href=\"/zh/docs/10/libpq.html#LIBPQ-PARAMKEYWORDS\" rel=\"nofollow\">\u7b2c\u00a033.1.2\u00a0\u8282</a>\u3002\uff09\u6784\u5efa\u65f6\u53ef\u4ee5\u4f7f\u7528 <code>./configure --with-krb-srvnam=</code><em><code>whatever</code></em>\uff0c\u5c06\u5b89\u88c5\u9ed8\u8ba4\u503c\u4ece <code>postgres</code> \u6539\u4e3a\u5176\u4ed6\u503c\u3002\u5728\u5927\u591a\u6570\u73af\u5883\u4e2d\uff0c\u65e0\u9700\u66f4\u6539\u6b64\u53c2\u6570\u3002\u67d0\u4e9b Kerberos \u5b9e\u73b0\u53ef\u80fd\u8981\u6c42\u4e0d\u540c\u7684\u670d\u52a1\u540d\uff0c\u4f8b\u5982 Microsoft Active Directory \u8981\u6c42\u670d\u52a1\u540d\u4f7f\u7528\u5927\u5199\uff08<code>POSTGRES</code>\uff09\u3002</p><p><em><code>hostname</code></em> \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002\u670d\u52a1\u4e3b\u4f53\u7684 realm \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u9996\u9009 realm\u3002</p><p><a href=\"/zh/docs/10/auth-methods.html#GSSAPI-AUTH\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "11": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u5728\u7cfb\u7edf\u7528\u6237\u540d\u4e0e\u6570\u636e\u5e93\u7528\u6237\u540d\u4e4b\u95f4\u5efa\u7acb\u6620\u5c04\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e username@EXAMPLE.COM \uff08\u6216\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\u8fd9\u6837\u7684 GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u6620\u5c04\u6240\u7528\u7684\u7528\u6237\u540d\u662f username@EXAMPLE.COM \uff08\u6216\u76f8\u5e94\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5c06 include_realm \u8bbe\u4e3a 0\uff0c\u6b64\u65f6\u6620\u5c04\u6240\u89c1\u7684\u7cfb\u7edf\u7528\u6237\u540d\u4e3a username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v11.22/postgresql-11.22.tar.bz2", "label": "11.22", "major": "11", "channel": "historical", "revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0", "source_sha256": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0", "catalog_fingerprint": "8f21f4444b7f68923f4762af0eb7937fa2907026e91249483e79050de012c901"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v11.22/postgresql-11.22.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, {"url": "/docs/11/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 11 English manual", "sha256": "123965cdb7be25b3abcb43a1eb36ca4918913ed79859779f9bc9607bf41656fb"}, {"url": "/docs/11/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 11 English manual", "sha256": "5477c61a002171f5b4c462052d91231c405f39d89d825faf71e52fbae358eef7"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/11/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "11", "build_id": 64, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "2caf85c64fc6359b18bce303f443493f472a29e6d1757452d8bc3781054061e2", "fragment_sha256": "dda1ee468bf8ad483973c50d49056a677c03d342c2fc5c4e780416cc221f7830", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:ef5c7bc074acae9795db16e6b7482aea3b222bd4bcce0f76831332b97a21e8a1", "translated_from_revision": null}, "body_sha256": "84058effa0244de37afab5ac622654e57bdf9572f77e0d42bba410c8ec8dc8da", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "11", "text_hash": "e171d0876ad8a43cd6023180adbaf1fb63a360b41f9126aefdd9f057dfcd765f", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u5728\u7cfb\u7edf\u7528\u6237\u540d\u4e0e\u6570\u636e\u5e93\u7528\u6237\u540d\u4e4b\u95f4\u5efa\u7acb\u6620\u5c04\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e username@EXAMPLE.COM \uff08\u6216\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\u8fd9\u6837\u7684 GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u6620\u5c04\u6240\u7528\u7684\u7528\u6237\u540d\u662f username@EXAMPLE.COM \uff08\u6216\u76f8\u5e94\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5c06 include_realm \u8bbe\u4e3a 0\uff0c\u6b64\u65f6\u6620\u5c04\u6240\u89c1\u7684\u7cfb\u7edf\u7528\u6237\u540d\u4e3a username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/11/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "11", "build_id": 64, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "2caf85c64fc6359b18bce303f443493f472a29e6d1757452d8bc3781054061e2", "fragment_sha256": "dda1ee468bf8ad483973c50d49056a677c03d342c2fc5c4e780416cc221f7830", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:ef5c7bc074acae9795db16e6b7482aea3b222bd4bcce0f76831332b97a21e8a1", "translated_from_revision": null}, "body_sha256": "84058effa0244de37afab5ac622654e57bdf9572f77e0d42bba410c8ec8dc8da", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p><span class=\"productname\">GSSAPI</span> \u662f RFC 2743 \u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u6309\u7167 RFC 1964 \u652f\u6301\u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u8ba4\u8bc1\u7684 <span class=\"productname\">GSSAPI</span>\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u8fc7\u7a0b\u672c\u8eab\u662f\u5b89\u5168\u7684\uff0c\u4f46\u9664\u975e\u4f7f\u7528 <acronym class=\"acronym\">SSL</acronym>\uff0c\u5426\u5219\u6570\u636e\u5e93\u8fde\u63a5\u4e0a\u4f20\u8f93\u7684\u6570\u636e\u4e0d\u4f1a\u52a0\u5bc6\u3002</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/11/installation.html\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p><span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u91c7\u7528\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code> \u7684\u6807\u51c6\u4e3b\u4f53\u3002PostgreSQL \u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u6240\u7528 keytab \u4e2d\u5305\u542b\u7684\u4efb\u4f55\u4e3b\u4f53\uff0c\u4f46\u5ba2\u6237\u7aef\u5efa\u7acb\u8fde\u63a5\u65f6\uff0c\u5fc5\u987b\u6ce8\u610f\u901a\u8fc7 <code class=\"literal\">krbsrvname</code> \u8fde\u63a5\u53c2\u6570\u6307\u5b9a\u6b63\u786e\u7684\u4e3b\u4f53\u4fe1\u606f\u3002\uff08\u53e6\u89c1<a class=\"xref\" href=\"/zh/docs/11/libpq.html#LIBPQ-PARAMKEYWORDS\">\u7b2c\u00a034.1.2\u00a0\u8282</a>\u3002\uff09\u6784\u5efa\u65f6\u53ef\u4ee5\u4f7f\u7528 <code class=\"literal\">./configure --with-krb-srvnam=</code><em class=\"replaceable\"><code>whatever</code></em>\uff0c\u5c06\u5b89\u88c5\u9ed8\u8ba4\u503c\u4ece <code class=\"literal\">postgres</code> \u6539\u4e3a\u5176\u4ed6\u503c\u3002\u5728\u5927\u591a\u6570\u73af\u5883\u4e2d\uff0c\u65e0\u9700\u66f4\u6539\u6b64\u53c2\u6570\u3002\u67d0\u4e9b Kerberos \u5b9e\u73b0\u53ef\u80fd\u8981\u6c42\u4e0d\u540c\u7684\u670d\u52a1\u540d\uff0c\u4f8b\u5982 Microsoft Active Directory \u8981\u6c42\u670d\u52a1\u540d\u4f7f\u7528\u5927\u5199\uff08<code class=\"literal\">POSTGRES</code>\uff09\u3002</p><p><em class=\"replaceable\"><code>hostname</code></em> \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002\u670d\u52a1\u4e3b\u4f53\u7684 realm \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u9996\u9009 realm\u3002</p><p><a href=\"/zh/docs/11/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "11", "link_map": {"/zh/docs/11/gssapi-auth.html": "/docs/11/gssapi-auth.html", "/zh/docs/11/installation.html": "/docs/11/installation.html", "/zh/docs/11/libpq.html#LIBPQ-PARAMKEYWORDS": "/docs/11/libpq.html#LIBPQ-PARAMKEYWORDS"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p><span>GSSAPI</span> \u662f RFC 2743 \u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u6309\u7167 RFC 1964 \u652f\u6301\u4f7f\u7528 <span>Kerberos</span> \u8ba4\u8bc1\u7684 <span>GSSAPI</span>\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u8fc7\u7a0b\u672c\u8eab\u662f\u5b89\u5168\u7684\uff0c\u4f46\u9664\u975e\u4f7f\u7528 <acronym>SSL</acronym>\uff0c\u5426\u5219\u6570\u636e\u5e93\u8fde\u63a5\u4e0a\u4f20\u8f93\u7684\u6570\u636e\u4e0d\u4f1a\u52a0\u5bc6\u3002</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/11/installation.html\" rel=\"nofollow\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p><span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u91c7\u7528\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code> \u7684\u6807\u51c6\u4e3b\u4f53\u3002PostgreSQL \u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u6240\u7528 keytab \u4e2d\u5305\u542b\u7684\u4efb\u4f55\u4e3b\u4f53\uff0c\u4f46\u5ba2\u6237\u7aef\u5efa\u7acb\u8fde\u63a5\u65f6\uff0c\u5fc5\u987b\u6ce8\u610f\u901a\u8fc7 <code>krbsrvname</code> \u8fde\u63a5\u53c2\u6570\u6307\u5b9a\u6b63\u786e\u7684\u4e3b\u4f53\u4fe1\u606f\u3002\uff08\u53e6\u89c1<a href=\"/zh/docs/11/libpq.html#LIBPQ-PARAMKEYWORDS\" rel=\"nofollow\">\u7b2c\u00a034.1.2\u00a0\u8282</a>\u3002\uff09\u6784\u5efa\u65f6\u53ef\u4ee5\u4f7f\u7528 <code>./configure --with-krb-srvnam=</code><em><code>whatever</code></em>\uff0c\u5c06\u5b89\u88c5\u9ed8\u8ba4\u503c\u4ece <code>postgres</code> \u6539\u4e3a\u5176\u4ed6\u503c\u3002\u5728\u5927\u591a\u6570\u73af\u5883\u4e2d\uff0c\u65e0\u9700\u66f4\u6539\u6b64\u53c2\u6570\u3002\u67d0\u4e9b Kerberos \u5b9e\u73b0\u53ef\u80fd\u8981\u6c42\u4e0d\u540c\u7684\u670d\u52a1\u540d\uff0c\u4f8b\u5982 Microsoft Active Directory \u8981\u6c42\u670d\u52a1\u540d\u4f7f\u7528\u5927\u5199\uff08<code>POSTGRES</code>\uff09\u3002</p><p><em><code>hostname</code></em> \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002\u670d\u52a1\u4e3b\u4f53\u7684 realm \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u9996\u9009 realm\u3002</p><p><a href=\"/zh/docs/11/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "90b0d25532a1e651f1a1eb60ee410de8ea0434409d8c41c4b6b7fc861d07f384", "content_hash": "e171d0876ad8a43cd6023180adbaf1fb63a360b41f9126aefdd9f057dfcd765f", "source_database": "center", "source_revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u5728\u7cfb\u7edf\u7528\u6237\u540d\u4e0e\u6570\u636e\u5e93\u7528\u6237\u540d\u4e4b\u95f4\u5efa\u7acb\u6620\u5c04\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e username@EXAMPLE.COM \uff08\u6216\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\u8fd9\u6837\u7684 GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u6620\u5c04\u6240\u7528\u7684\u7528\u6237\u540d\u662f username@EXAMPLE.COM \uff08\u6216\u76f8\u5e94\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5c06 include_realm \u8bbe\u4e3a 0\uff0c\u6b64\u65f6\u6620\u5c04\u6240\u89c1\u7684\u7cfb\u7edf\u7528\u6237\u540d\u4e3a username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/11/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/11/gssapi-auth.html", "method": "same-major semantic node", "sha256": "67618cfbefdcb501b27c607fb3c24fea007d5113dbecb6b354130878751bff64", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[13]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[13]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[13]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[12]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/11/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details.", "/versions/11/facts/0/label": "Method", "/versions/11/facts/1/label": "Configuration", "/versions/11/facts/2/label": "Inventory", "/versions/11/facts/2/value": "User-visible source authentication method", "/versions/11/tables/0/title": "Documented method options and alternatives", "/versions/11/tables/0/columns/0/label": "Option or term", "/versions/11/tables/0/columns/1/label": "Meaning", "/versions/11/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/11/tables/0/rows/1/description": "Allows for mapping between system and database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/11/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "45a028f12ec1801b2299cff1849a4e320ff87b8379ab0e4cea511152a341e814", "canonical_center_text_hash": "e171d0876ad8a43cd6023180adbaf1fb63a360b41f9126aefdd9f057dfcd765f"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p><span>GSSAPI</span> \u662f RFC 2743 \u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u6309\u7167 RFC 1964 \u652f\u6301\u4f7f\u7528 <span>Kerberos</span> \u8ba4\u8bc1\u7684 <span>GSSAPI</span>\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u8fc7\u7a0b\u672c\u8eab\u662f\u5b89\u5168\u7684\uff0c\u4f46\u9664\u975e\u4f7f\u7528 <acronym>SSL</acronym>\uff0c\u5426\u5219\u6570\u636e\u5e93\u8fde\u63a5\u4e0a\u4f20\u8f93\u7684\u6570\u636e\u4e0d\u4f1a\u52a0\u5bc6\u3002</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/11/installation.html\" rel=\"nofollow\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p><span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u91c7\u7528\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code> \u7684\u6807\u51c6\u4e3b\u4f53\u3002PostgreSQL \u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u6240\u7528 keytab \u4e2d\u5305\u542b\u7684\u4efb\u4f55\u4e3b\u4f53\uff0c\u4f46\u5ba2\u6237\u7aef\u5efa\u7acb\u8fde\u63a5\u65f6\uff0c\u5fc5\u987b\u6ce8\u610f\u901a\u8fc7 <code>krbsrvname</code> \u8fde\u63a5\u53c2\u6570\u6307\u5b9a\u6b63\u786e\u7684\u4e3b\u4f53\u4fe1\u606f\u3002\uff08\u53e6\u89c1<a href=\"/zh/docs/11/libpq.html#LIBPQ-PARAMKEYWORDS\" rel=\"nofollow\">\u7b2c\u00a034.1.2\u00a0\u8282</a>\u3002\uff09\u6784\u5efa\u65f6\u53ef\u4ee5\u4f7f\u7528 <code>./configure --with-krb-srvnam=</code><em><code>whatever</code></em>\uff0c\u5c06\u5b89\u88c5\u9ed8\u8ba4\u503c\u4ece <code>postgres</code> \u6539\u4e3a\u5176\u4ed6\u503c\u3002\u5728\u5927\u591a\u6570\u73af\u5883\u4e2d\uff0c\u65e0\u9700\u66f4\u6539\u6b64\u53c2\u6570\u3002\u67d0\u4e9b Kerberos \u5b9e\u73b0\u53ef\u80fd\u8981\u6c42\u4e0d\u540c\u7684\u670d\u52a1\u540d\uff0c\u4f8b\u5982 Microsoft Active Directory \u8981\u6c42\u670d\u52a1\u540d\u4f7f\u7528\u5927\u5199\uff08<code>POSTGRES</code>\uff09\u3002</p><p><em><code>hostname</code></em> \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002\u670d\u52a1\u4e3b\u4f53\u7684 realm \u662f\u670d\u52a1\u5668\u673a\u5668\u7684\u9996\u9009 realm\u3002</p><p><a href=\"/zh/docs/11/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "12": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v12.22/postgresql-12.22.tar.bz2", "label": "12.22", "major": "12", "channel": "historical", "revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b", "source_sha256": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b", "catalog_fingerprint": "9f857f4ee4875f9c7de6bfc9df4b757dec8b3a0bb88eadb519c7bd267bd56149"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v12.22/postgresql-12.22.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, {"url": "/docs/12/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 12 English manual", "sha256": "2d46945dcabedb2ca954fdacaebd3d7c59425f53db971d33d92be3ea1d6d03ea"}, {"url": "/docs/12/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 12 English manual", "sha256": "07e8cddcb38076c86dab95b72c4380a7a325f22401b5b7f9af5dd4931876f2cb"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/12/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "12", "build_id": 65, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "a7530301bdbcd61b27db02ecb458d40559f2720e357f6423cf3dfdb3a5fe81e5", "fragment_sha256": "dac48c3aa3dc4d62285ce6786fba3f1fef2b2ded412c75e8f84bbec514659cb5", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:86d2ff781f93e1de17122ebc514d5e64fcb63fed15941f496d7e146c6dcc7a49", "translated_from_revision": null}, "body_sha256": "0f7ad5aa150e84b54ff00757712d3f17b3bf04b88e81a5e859c48c47ef9633f3", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "12", "text_hash": "93abae977500c956fd466a852a104d90732343f52d671702c14920aad1f2ca44", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/12/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "12", "build_id": 65, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "a7530301bdbcd61b27db02ecb458d40559f2720e357f6423cf3dfdb3a5fe81e5", "fragment_sha256": "dac48c3aa3dc4d62285ce6786fba3f1fef2b2ded412c75e8f84bbec514659cb5", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:86d2ff781f93e1de17122ebc514d5e64fcb63fed15941f496d7e146c6dcc7a49", "translated_from_revision": null}, "body_sha256": "0f7ad5aa150e84b54ff00757712d3f17b3bf04b88e81a5e859c48c47ef9633f3", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/12/installation.html\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/12/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/12/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "12", "link_map": {"/zh/docs/12/gssapi-auth.html": "/docs/12/gssapi-auth.html", "/zh/docs/12/installation.html": "/docs/12/installation.html", "/zh/docs/12/libpq.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/12/libpq.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/12/installation.html\" rel=\"nofollow\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/12/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/12/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "2613eb19b9511e142d670fd0b83f26e70020d0cdef6c02e287b868ef2e210ab9", "content_hash": "93abae977500c956fd466a852a104d90732343f52d671702c14920aad1f2ca44", "source_database": "center", "source_revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/12/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/12/gssapi-auth.html", "method": "same-major semantic node", "sha256": "9753d5d5662838783ac0ed72c756bc0be06db16dd2b9987ccb6b1c6e1e4e58a8", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/12/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/12/facts/0/label": "Method", "/versions/12/facts/1/label": "Configuration", "/versions/12/facts/2/label": "Inventory", "/versions/12/facts/2/value": "User-visible source authentication method", "/versions/12/tables/0/title": "Documented method options and alternatives", "/versions/12/tables/0/columns/0/label": "Option or term", "/versions/12/tables/0/columns/1/label": "Meaning", "/versions/12/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/12/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/12/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "adc37c24e6d276559a44e1f21dbc9300452c94154925249a084342823907af33", "canonical_center_text_hash": "93abae977500c956fd466a852a104d90732343f52d671702c14920aad1f2ca44"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/12/installation.html\" rel=\"nofollow\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/12/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/12/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "13": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v13.23/postgresql-13.23.tar.bz2", "label": "13.23", "major": "13", "channel": "historical", "revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6", "source_sha256": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6", "catalog_fingerprint": "c7015c845255c9d721c547c8ab9ef37825d332588c9691d982e6906b7d571002"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v13.23/postgresql-13.23.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, {"url": "/docs/13/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 13 English manual", "sha256": "4e0099fbc60cc16079a25f6188de6e2123bb58bc2b4e1a0aceb7cedda0872776"}, {"url": "/docs/13/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 13 English manual", "sha256": "3cc6ce851945cba450e6b26ecf9cae1efd3c03fb7b55e17876f4d9ea418a7c2e"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/13/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "13", "build_id": 66, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "3d9f3540ac2e6f962dc42003c29b040bad0d3da94bc6f0e433ffc6ec31173a89", "fragment_sha256": "d67b43481894812488392c4dba160b917cda835fbc88f610eaddf995c20484ba", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:a13a825c39f0268ef1cfe9137e283e38d0da73b2d7894f0733c7b26372a4f6a4", "translated_from_revision": null}, "body_sha256": "ceb5e6acc9691d0e51ba617fff0085b0af641fb8edbacacf290179a2ae5669ef", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "13", "text_hash": "f0d40ade570b0dd2d5e622bbf8814e1d8201195108bb6ac0ca58f1be30d2027c", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/13/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "13", "build_id": 66, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "3d9f3540ac2e6f962dc42003c29b040bad0d3da94bc6f0e433ffc6ec31173a89", "fragment_sha256": "d67b43481894812488392c4dba160b917cda835fbc88f610eaddf995c20484ba", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:a13a825c39f0268ef1cfe9137e283e38d0da73b2d7894f0733c7b26372a4f6a4", "translated_from_revision": null}, "body_sha256": "ceb5e6acc9691d0e51ba617fff0085b0af641fb8edbacacf290179a2ae5669ef", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/13/installation.html\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/13/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/13/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "13", "link_map": {"/zh/docs/13/gssapi-auth.html": "/docs/13/gssapi-auth.html", "/zh/docs/13/installation.html": "/docs/13/installation.html", "/zh/docs/13/libpq.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/13/libpq.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/13/installation.html\" rel=\"nofollow\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/13/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/13/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "7d3bcff8f30ed069cad3e667f217af585fde07ed27ccb236e70fd370ab88facb", "content_hash": "f0d40ade570b0dd2d5e622bbf8814e1d8201195108bb6ac0ca58f1be30d2027c", "source_database": "center", "source_revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/13/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/13/gssapi-auth.html", "method": "same-major semantic node", "sha256": "8989d8357c1a8b014d47b04ed9f6b68d15a9e715cb00322726adb2cf28d5d9b4", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/13/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/13/facts/0/label": "Method", "/versions/13/facts/1/label": "Configuration", "/versions/13/facts/2/label": "Inventory", "/versions/13/facts/2/value": "User-visible source authentication method", "/versions/13/tables/0/title": "Documented method options and alternatives", "/versions/13/tables/0/columns/0/label": "Option or term", "/versions/13/tables/0/columns/1/label": "Meaning", "/versions/13/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/13/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/13/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "c17992d800a6e893008edf7ad8b8c3634766e0d35e4e5178f9cb3add376c1a75", "canonical_center_text_hash": "f0d40ade570b0dd2d5e622bbf8814e1d8201195108bb6ac0ca58f1be30d2027c"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/13/installation.html\" rel=\"nofollow\">\u7b2c\u00a016\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/13/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/13/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "14": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v14.24/postgresql-14.24.tar.bz2", "label": "14.24", "major": "14", "channel": "stable", "revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897", "source_sha256": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897", "catalog_fingerprint": "b272e6a82e4c46efda81c3a6a4cdf7de6a83dfff7f02f226a392fbe9acdd3adb"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v14.24/postgresql-14.24.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, {"url": "/docs/14/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 14 English manual", "sha256": "011fe931c24ac53aeb85f98a816976e6c12c754b115fc458c37af750f5404c7e"}, {"url": "/docs/14/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 14 English manual", "sha256": "c9a75f04fd4a1069ea261ba061578a75c47a4b7e0bbf88761502fd4c19ccbc3f"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/14/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "14", "build_id": 99, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "7a52514d1a1ca37e4ec50fd0a0846d5c0167583ea9696816a2934697c30b7e03", "fragment_sha256": "030b370124d2a2312832aa05b44eff2a2da9a0dc79b630b7f1e5448c0790b480", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:87e6aa4fd6e1ec85c5f4a6de4f5647cfd9e5de734ca2c266d32b6d6192c662ef", "translated_from_revision": null}, "body_sha256": "051e1bc3233e378d28f4e71799476ac75e96161a57dad711613c00aa5b67d1d0", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "14", "text_hash": "95ade983879afd3cdef05f6af7e780edc2c983c51329eeb9b76aa589d520dc71", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/14/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "14", "build_id": 99, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "7a52514d1a1ca37e4ec50fd0a0846d5c0167583ea9696816a2934697c30b7e03", "fragment_sha256": "030b370124d2a2312832aa05b44eff2a2da9a0dc79b630b7f1e5448c0790b480", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:87e6aa4fd6e1ec85c5f4a6de4f5647cfd9e5de734ca2c266d32b6d6192c662ef", "translated_from_revision": null}, "body_sha256": "051e1bc3233e378d28f4e71799476ac75e96161a57dad711613c00aa5b67d1d0", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/14/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/14/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/14/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "14", "link_map": {"/zh/docs/14/gssapi-auth.html": "/docs/14/gssapi-auth.html", "/zh/docs/14/installation.html": "/docs/14/installation.html", "/zh/docs/14/libpq.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/14/libpq.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/14/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/14/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/14/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "9497471e98e1f26ae807504f64eb7b9298ad69ff6a7f750e2dc6a8553e56739f", "content_hash": "95ade983879afd3cdef05f6af7e780edc2c983c51329eeb9b76aa589d520dc71", "source_database": "center", "source_revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/14/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/14/gssapi-auth.html", "method": "same-major semantic node", "sha256": "251da3b9a24fa3e9cc8ad2ebb3c4637874d5fbb64ed996268032b877cbbf4b4b", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/14/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 21.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/14/facts/0/label": "Method", "/versions/14/facts/1/label": "Configuration", "/versions/14/facts/2/label": "Inventory", "/versions/14/facts/2/value": "User-visible source authentication method", "/versions/14/tables/0/title": "Documented method options and alternatives", "/versions/14/tables/0/columns/0/label": "Option or term", "/versions/14/tables/0/columns/1/label": "Meaning", "/versions/14/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 21.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/14/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 21.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/14/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "aa90f260638097919e767985dc176c4a3af6decc74da3cc777a538264605c59e", "canonical_center_text_hash": "95ade983879afd3cdef05f6af7e780edc2c983c51329eeb9b76aa589d520dc71"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/14/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/14/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/14/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "15": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v15.19/postgresql-15.19.tar.bz2", "label": "15.19", "major": "15", "channel": "stable", "revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89", "source_sha256": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89", "catalog_fingerprint": "fefe3c425147a86defada190c9b0663cfe02caa1724f5dede93e46457572252d"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v15.19/postgresql-15.19.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, {"url": "/docs/15/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 15 English manual", "sha256": "16f71c4b4c07cc5f56deeb8f302e0bacfeeea542558aa5b77da7be2eb81fdeb9"}, {"url": "/docs/15/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 15 English manual", "sha256": "0470cd3eeb82cbc32d4b8b79e29f4427bdfd01f5bb15e6d9b7cee2f6dd2bba44"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/15/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "15", "build_id": 101, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "b673dff7ebdb82e7a875235d33d960e9bcf3d022084e064bf3b8c8a335fdd0e0", "fragment_sha256": "e551316b4a743b111a6bfb8d9acc3bea52fdbfd064a30e1db844572be82df5b5", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:6bce1a2df9170cb1146a1411c5547190856638221a6539e618ee1016c9f493ad", "translated_from_revision": null}, "body_sha256": "96a6a02f12c956f4de4b2f9f5ebb1ae21a5e061dc7987d6776d1dd1d0ce07509", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "15", "text_hash": "b898e7ef611ce5c80a5b6516e911cf698787658a09f389c4d4e04152e7d32abf", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/15/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "15", "build_id": 101, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "b673dff7ebdb82e7a875235d33d960e9bcf3d022084e064bf3b8c8a335fdd0e0", "fragment_sha256": "e551316b4a743b111a6bfb8d9acc3bea52fdbfd064a30e1db844572be82df5b5", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:6bce1a2df9170cb1146a1411c5547190856638221a6539e618ee1016c9f493ad", "translated_from_revision": null}, "body_sha256": "96a6a02f12c956f4de4b2f9f5ebb1ae21a5e061dc7987d6776d1dd1d0ce07509", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/15/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/15/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/15/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "15", "link_map": {"/zh/docs/15/gssapi-auth.html": "/docs/15/gssapi-auth.html", "/zh/docs/15/installation.html": "/docs/15/installation.html", "/zh/docs/15/libpq.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/15/libpq.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/15/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/15/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/15/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "4c9a7c5cf7a9d09d1eceec374cde0208908f2577c3a93b63711aa391dfd8895e", "content_hash": "b898e7ef611ce5c80a5b6516e911cf698787658a09f389c4d4e04152e7d32abf", "source_database": "center", "source_revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/15/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/15/gssapi-auth.html", "method": "same-major semantic node", "sha256": "f8960d1bbf8ea6e62b31531e0985b103ab592ecdcd90133c466dd370f2ccb132", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/15/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 21.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/15/facts/0/label": "Method", "/versions/15/facts/1/label": "Configuration", "/versions/15/facts/2/label": "Inventory", "/versions/15/facts/2/value": "User-visible source authentication method", "/versions/15/tables/0/title": "Documented method options and alternatives", "/versions/15/tables/0/columns/0/label": "Option or term", "/versions/15/tables/0/columns/1/label": "Meaning", "/versions/15/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 21.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/15/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 21.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/15/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "9c5acf0984c82020579956bb98529a7a8d9400b4a3ec878b9a95c7002ab349e8", "canonical_center_text_hash": "b898e7ef611ce5c80a5b6516e911cf698787658a09f389c4d4e04152e7d32abf"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/15/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/15/libpq.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/15/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "16": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v16.15/postgresql-16.15.tar.bz2", "label": "16.15", "major": "16", "channel": "stable", "revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed", "source_sha256": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed", "catalog_fingerprint": "fa133458dc8f52e15083b4f59b7a582e2e378b608d3ac5c53054df458a374e23"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v16.15/postgresql-16.15.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, {"url": "/docs/16/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 16 English manual", "sha256": "7e04796130a51899cc5c7fa3cc162f962c8db7608b0c67011e42b0ac011aac96"}, {"url": "/docs/16/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 16 English manual", "sha256": "ccc5146375a184646d5992edbc693e12c0de4431a35141d6b56c8dd6b3c52132"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/16/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "16", "build_id": 103, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "35762d3402ce98910b10960f52942f92009df528bd23f44f8210d3dbcf37543a", "fragment_sha256": "7728e061870bb65add5af05140e781dbb4345edf89ed31b59eeb495c0a8835d3", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:80579a071736780f9c4022bb5148e1fb1256f1a33591306af67816e9e9bf3a9b", "translated_from_revision": null}, "body_sha256": "07143eb5f89f50e5d63e3a76bbed3522cd14e84e2aee93373b1f399ca4b4f770", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "16", "text_hash": "6b393b350c96be7e6953c5956b5db5b1b617f70cd8db2c1be044788833378fbd", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/16/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "16", "build_id": 103, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "35762d3402ce98910b10960f52942f92009df528bd23f44f8210d3dbcf37543a", "fragment_sha256": "7728e061870bb65add5af05140e781dbb4345edf89ed31b59eeb495c0a8835d3", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:80579a071736780f9c4022bb5148e1fb1256f1a33591306af67816e9e9bf3a9b", "translated_from_revision": null}, "body_sha256": "07143eb5f89f50e5d63e3a76bbed3522cd14e84e2aee93373b1f399ca4b4f770", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/16/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/16/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/16/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "16", "link_map": {"/zh/docs/16/gssapi-auth.html": "/docs/16/gssapi-auth.html", "/zh/docs/16/installation.html": "/docs/16/installation.html", "/zh/docs/16/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/16/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/16/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/16/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/16/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "e2bc6c710c116d888c741b1cfc830aab37faecd4e5a491f6d037681cbed0d1c0", "content_hash": "6b393b350c96be7e6953c5956b5db5b1b617f70cd8db2c1be044788833378fbd", "source_database": "center", "source_revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 21.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 21.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/16/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/16/gssapi-auth.html", "method": "same-major semantic node", "sha256": "6050075d695d8ede26d3a984f5c4a42473e156e8d7e6e59f255b2d453aa3985c", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/16/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 21.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/16/facts/0/label": "Method", "/versions/16/facts/1/label": "Configuration", "/versions/16/facts/2/label": "Inventory", "/versions/16/facts/2/value": "User-visible source authentication method", "/versions/16/tables/0/title": "Documented method options and alternatives", "/versions/16/tables/0/columns/0/label": "Option or term", "/versions/16/tables/0/columns/1/label": "Meaning", "/versions/16/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 21.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/16/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 21.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/16/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "006b0bb060309cc550de961c8eaf5d5415ea06515241d0aca0bfa29b6d24ea65", "canonical_center_text_hash": "6b393b350c96be7e6953c5956b5db5b1b617f70cd8db2c1be044788833378fbd"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/16/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/16/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/16/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "17": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v17.11/postgresql-17.11.tar.bz2", "label": "17.11", "major": "17", "channel": "stable", "revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979", "source_sha256": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979", "catalog_fingerprint": "4bbe3ac77becd618478f66aec420a533e9017be356c5c1d51a4b17f0fd497c07"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v17.11/postgresql-17.11.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, {"url": "/docs/17/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 17 English manual", "sha256": "8ff2953089d8bb969deb356244f5fa7540fd521d0c0f004eef2019184d5e6478"}, {"url": "/docs/17/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 17 English manual", "sha256": "00c7a7c25d46aa1b2f24cd744cd4990ca4218cfafed2a4cab8c1dc1092090bba"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/17/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "17", "build_id": 105, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "6cc8f0d2e21460f811f346187f7df3c62a975676ce953af306936c597b208bf7", "fragment_sha256": "261b8693d42bfbf224a570de17d55888a92750778bc6cbe0f4a6cd4f56d8993b", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:7340767258d21c21b36f373f1fff6bab2be18e0daca13a865129db6105c09efd", "translated_from_revision": null}, "body_sha256": "8a28cb61c2d5147d25a47433a6ecdd4b58eac65fe2921002cc0112497cac6221", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "17", "text_hash": "112e84c855f4095ce708732cdbfa33af4c86c79e68dfc439ef253a0569d43b63", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/17/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "17", "build_id": 105, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "6cc8f0d2e21460f811f346187f7df3c62a975676ce953af306936c597b208bf7", "fragment_sha256": "261b8693d42bfbf224a570de17d55888a92750778bc6cbe0f4a6cd4f56d8993b", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:7340767258d21c21b36f373f1fff6bab2be18e0daca13a865129db6105c09efd", "translated_from_revision": null}, "body_sha256": "8a28cb61c2d5147d25a47433a6ecdd4b58eac65fe2921002cc0112497cac6221", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/17/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/17/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/17/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "17", "link_map": {"/zh/docs/17/gssapi-auth.html": "/docs/17/gssapi-auth.html", "/zh/docs/17/installation.html": "/docs/17/installation.html", "/zh/docs/17/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/17/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/17/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/17/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/17/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "d11e01673ff8f648ad694726aedf8dd8eaea62489f6f60fb97e7dfc00b8b449b", "content_hash": "112e84c855f4095ce708732cdbfa33af4c86c79e68dfc439ef253a0569d43b63", "source_database": "center", "source_revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/17/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/17/gssapi-auth.html", "method": "same-major semantic node", "sha256": "d8d78e357e46dfe93bcfd719fba4335d51bcad2b46da1fdc6084732f747a4b9f", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/17/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/17/facts/0/label": "Method", "/versions/17/facts/1/label": "Configuration", "/versions/17/facts/2/label": "Inventory", "/versions/17/facts/2/value": "User-visible source authentication method", "/versions/17/tables/0/title": "Documented method options and alternatives", "/versions/17/tables/0/columns/0/label": "Option or term", "/versions/17/tables/0/columns/1/label": "Meaning", "/versions/17/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/17/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/17/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "e9d4d2791ee6f6c48f679cdf5b2b7d1de796929804d1b5ec5990173f9805829f", "canonical_center_text_hash": "112e84c855f4095ce708732cdbfa33af4c86c79e68dfc439ef253a0569d43b63"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/17/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/17/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/17/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "18": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2", "label": "18.6", "major": "18", "channel": "stable", "revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f", "source_sha256": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f", "catalog_fingerprint": "65c93d6048ef30e61023a84f9680fa6a92b1c383b7eb226741170077eb078502"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, {"url": "/docs/18/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 18 English manual", "sha256": "00da5d918d0d4f101749a389bcef7ae273436d43ddf22dcb5d38d2ec1d7c8735"}, {"url": "/docs/18/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 18 English manual", "sha256": "6340d4abea2e0a3482afc31bcd1599a0fa10dc28a6f1e05d79ba831e2dd0b4c9"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/18/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "18", "build_id": 107, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "b5d45f5fade99900e7f79412d8e414b51ac64177a6cf3cd5fee23f86556aa750", "fragment_sha256": "837f1955a46b92d79a860b6dde25c12b6308d57353bf40fd2a60a19bdca559b7", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:08e987a66af27b98444a8057c256314eafa13611a3fb9e888214fc436824244b", "translated_from_revision": null}, "body_sha256": "53397a0b0f542fd9a7c78ab8a92b46bd33497ce0098297777362f40ad8560af9", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "18", "text_hash": "ccb583f703d83bd44772fc28d06b519b8c5c44e2ab596ac3bb2cea86fa321b68", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/18/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "18", "build_id": 107, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "b5d45f5fade99900e7f79412d8e414b51ac64177a6cf3cd5fee23f86556aa750", "fragment_sha256": "837f1955a46b92d79a860b6dde25c12b6308d57353bf40fd2a60a19bdca559b7", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:08e987a66af27b98444a8057c256314eafa13611a3fb9e888214fc436824244b", "translated_from_revision": null}, "body_sha256": "53397a0b0f542fd9a7c78ab8a92b46bd33497ce0098297777362f40ad8560af9", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/18/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/18/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "18", "link_map": {"/zh/docs/18/gssapi-auth.html": "/docs/18/gssapi-auth.html", "/zh/docs/18/installation.html": "/docs/18/installation.html", "/zh/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/18/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/18/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "1ab75ef54a6c3e972e714cea0910a7a2b70ea84adc821a11ba06753f5ad7ece2", "content_hash": "ccb583f703d83bd44772fc28d06b519b8c5c44e2ab596ac3bb2cea86fa321b68", "source_database": "center", "source_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/18/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/18/gssapi-auth.html", "method": "same-major semantic node", "sha256": "9d738f27e484913c783da4fab3912a12c933c2d71acac2667824242d9c6763f9", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/18/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/18/facts/0/label": "Method", "/versions/18/facts/1/label": "Configuration", "/versions/18/facts/2/label": "Inventory", "/versions/18/facts/2/value": "User-visible source authentication method", "/versions/18/tables/0/title": "Documented method options and alternatives", "/versions/18/tables/0/columns/0/label": "Option or term", "/versions/18/tables/0/columns/1/label": "Meaning", "/versions/18/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/18/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/18/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "f2983abaf29f5ca64050dbb361234b4bd69608ca59f4e4eddf1bdc3939c3efe1", "canonical_center_text_hash": "ccb583f703d83bd44772fc28d06b519b8c5c44e2ab596ac3bb2cea86fa321b68"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/18/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/18/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "center_zh_rendered": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 SSL \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/docs/18/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/docs/18/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "19": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v19rc1/postgresql-19rc1.tar.bz2", "label": "19rc1", "major": "19", "channel": "preview", "revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "source_sha256": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "catalog_fingerprint": "62fbf1a3689dbe8bf7e6b3372cfe6fbf867581427b3858a94c8419b77a4d2d1d"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v19rc1/postgresql-19rc1.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, {"url": "/docs/19/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 19 English manual", "sha256": "9f885c876fb9052026056028d67a821b398379477e2934d524b8958ef46f3f76"}, {"url": "/docs/19/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 19 English manual", "sha256": "f61179425c2d8330655f93b616bddb2ab518eeb12ebe4bc77af4a3af78399eeb"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/19/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "19", "build_id": 109, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "394e63358c9082c2b4d75cdd98291d667f8c02d405b7ad0d77547dbc354c2262", "fragment_sha256": "0c6b5a2677657d2d648493c540924082648d227b21e1135cae736ccf8637f4c9", "source_revision": "sha256:af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:65fda1f1b62a89992b84014c9157e61b67dbe8190e93945826efec668fad038c", "translated_from_revision": "sha256:af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "body_sha256": "000647bb8b02eb47544b7b18b4435a107650cc0e84f62eb7b1e260007cb694f9", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "19", "text_hash": "ea12c92c241854c811312435d9180c0297dd94014b0ccbdb36c1b10db82494a2", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/19/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "19", "build_id": 109, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "394e63358c9082c2b4d75cdd98291d667f8c02d405b7ad0d77547dbc354c2262", "fragment_sha256": "0c6b5a2677657d2d648493c540924082648d227b21e1135cae736ccf8637f4c9", "source_revision": "sha256:af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:65fda1f1b62a89992b84014c9157e61b67dbe8190e93945826efec668fad038c", "translated_from_revision": "sha256:af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "body_sha256": "000647bb8b02eb47544b7b18b4435a107650cc0e84f62eb7b1e260007cb694f9", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/19/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/19/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/19/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "19", "link_map": {"/zh/docs/19/gssapi-auth.html": "/docs/19/gssapi-auth.html", "/zh/docs/19/installation.html": "/docs/19/installation.html", "/zh/docs/19/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/19/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/19/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/19/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/19/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "d8a821529b91f6a66910eb97945194474aa82347c8ac5133b1c00347f366f7d8", "content_hash": "ea12c92c241854c811312435d9180c0297dd94014b0ccbdb36c1b10db82494a2", "source_database": "center", "source_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/19/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/19/gssapi-auth.html", "method": "same-major semantic node", "sha256": "cfadd4bf18ab0129430cf6efd0e841ffedbe7e7b9caac6fa5a8a632b5987dbdc", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/19/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/19/facts/0/label": "Method", "/versions/19/facts/1/label": "Configuration", "/versions/19/facts/2/label": "Inventory", "/versions/19/facts/2/value": "User-visible source authentication method", "/versions/19/tables/0/title": "Documented method options and alternatives", "/versions/19/tables/0/columns/0/label": "Option or term", "/versions/19/tables/0/columns/1/label": "Meaning", "/versions/19/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/19/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/19/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "664e5d20119f5c97617f7d076eddfae74b725024588192a180188501cd966d14", "canonical_center_text_hash": "ea12c92c241854c811312435d9180c0297dd94014b0ccbdb36c1b10db82494a2"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/19/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/19/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/19/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "source_revalidation": {"kind": "static-same-version-source-and-manual-replay", "audit": "wiki-audit-20261023", "runtime_rerun": false, "compared_fields": "entity membership and source-derived facts; presentation markup normalized", "source_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "previous_source_revision": "83157ee9c599d03b2f7a3d73ef3a56ec24e0e79cc2b3501a64d1364f56398c86"}}, "20": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/snapshot/dev/postgresql-snapshot.tar.bz2", "label": "20devel", "major": "20", "channel": "devel", "revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "source_sha256": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "catalog_fingerprint": "1ae459dc2ba59b6e0a27d5cbeebb27c417dd0be8ddf853fb0c1e533d4e449c9a"}, "sources": [{"url": "https://ftp.postgresql.org/pub/snapshot/dev/postgresql-snapshot.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, {"url": "/docs/devel/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 20 English manual", "sha256": "35384cac58b61fdf200f984bf3f5f56604563ed54e67201061c4a060f5c07db4"}, {"url": "/docs/devel/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 20 English manual", "sha256": "aab989aead70e54ad4d37cb6d40b6a1aa370868177becdc759e6977d1074e02d"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/devel/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "20", "build_id": 111, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "dedffee5daea62d876bb327d6ed4659fb8b9800a3635210dbabb71a4f249ee04", "fragment_sha256": "2f3ad26dd8c9f5cbb287376ed4aa73995837765249df7ede5fd8aa7dbfeb2054", "source_revision": "sha256:49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:98c980963b401d40bd50df72b909e7523e3148b8fdb48edd897de2efb67e5235", "translated_from_revision": "sha256:49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "body_sha256": "f13c5c2302fc44728571a5349461197023cd9a58ccd8845f0bc4ae1f2af64711", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "20", "text_hash": "804dc6f916d89308cc192273f640907e8c26ef830103246d4f8e948c93bf5874", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/devel/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "20", "build_id": 111, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "dedffee5daea62d876bb327d6ed4659fb8b9800a3635210dbabb71a4f249ee04", "fragment_sha256": "2f3ad26dd8c9f5cbb287376ed4aa73995837765249df7ede5fd8aa7dbfeb2054", "source_revision": "sha256:49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:98c980963b401d40bd50df72b909e7523e3148b8fdb48edd897de2efb67e5235", "translated_from_revision": "sha256:49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "body_sha256": "f13c5c2302fc44728571a5349461197023cd9a58ccd8845f0bc4ae1f2af64711", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/devel/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/devel/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/devel/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "20", "link_map": {"/zh/docs/devel/gssapi-auth.html": "/docs/devel/gssapi-auth.html", "/zh/docs/devel/installation.html": "/docs/devel/installation.html", "/zh/docs/devel/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/devel/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/devel/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/devel/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/devel/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "4856c8c71bb7c1e32921933ea84c84c0ee9ae1990df383c84d64c444fb788221", "content_hash": "804dc6f916d89308cc192273f640907e8c26ef830103246d4f8e948c93bf5874", "source_database": "center", "source_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/devel/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/devel/gssapi-auth.html", "method": "same-major semantic node", "sha256": "71898d50a5be217d4a877ab14875a1a271a4aeb0de39966188caae65476680b1", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/summary": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details. It can be used in conjunction with GSSAPI encryption.", "/category": "Authentication and access control", "/versions/20/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/20/facts/0/label": "Method", "/versions/20/facts/1/label": "Configuration", "/versions/20/facts/2/label": "Inventory", "/versions/20/facts/2/value": "User-visible source authentication method", "/versions/20/tables/0/title": "Documented method options and alternatives", "/versions/20/tables/0/columns/0/label": "Option or term", "/versions/20/tables/0/columns/1/label": "Meaning", "/versions/20/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/20/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/20/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "8ec2e7a28b657cd331e8b40b9a62aa49593c908083470d1d6c0b2d7cde0bfdd2", "canonical_center_text_hash": "804dc6f916d89308cc192273f640907e8c26ef830103246d4f8e948c93bf5874"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/devel/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/devel/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/devel/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "source_revalidation": {"kind": "static-same-version-source-and-manual-replay", "audit": "wiki-audit-20261023", "runtime_rerun": false, "compared_fields": "entity membership and source-derived facts; presentation markup normalized", "source_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "previous_source_revision": "4d3346909b201ac1648232cf290462a7070c119326f56196f1f0253ed80fae41"}}}}, "snapshot": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2", "label": "18.6", "major": "18", "channel": "stable", "revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f", "source_sha256": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f", "catalog_fingerprint": "65c93d6048ef30e61023a84f9680fa6a92b1c383b7eb226741170077eb078502"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, {"url": "/docs/18/gssapi-auth.html", "path": "gssapi-auth.html", "label": "PostgreSQL 18 English manual", "sha256": "00da5d918d0d4f101749a389bcef7ae273436d43ddf22dcb5d38d2ec1d7c8735"}, {"url": "/docs/18/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 18 English manual", "sha256": "6340d4abea2e0a3482afc31bcd1599a0fa10dc28a6f1e05d79ba831e2dd0b4c9"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/18/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "18", "build_id": 107, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "b5d45f5fade99900e7f79412d8e414b51ac64177a6cf3cd5fee23f86556aa750", "fragment_sha256": "837f1955a46b92d79a860b6dde25c12b6308d57353bf40fd2a60a19bdca559b7", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:08e987a66af27b98444a8057c256314eafa13611a3fb9e888214fc436824244b", "translated_from_revision": null}, "body_sha256": "53397a0b0f542fd9a7c78ab8a92b46bd33497ce0098297777362f40ad8560af9", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "gss", "locale": "zh-Hans", "source": {"key": "gss", "locale": "zh-Hans", "version": "18", "text_hash": "ccb583f703d83bd44772fc28d06b519b8c5c44e2ab596ac3bb2cea86fa321b68", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "gss"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/18/gssapi-auth.html", "anchor": "", "locale": "zh-Hans", "version": "18", "build_id": 107, "page_key": "gssapi-auth.html", "extraction": "concept-introduction", "source_hash": "b5d45f5fade99900e7f79412d8e414b51ac64177a6cf3cd5fee23f86556aa750", "fragment_sha256": "837f1955a46b92d79a860b6dde25c12b6308d57353bf40fd2a60a19bdca559b7", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:08e987a66af27b98444a8057c256314eafa13611a3fb9e888214fc436824244b", "translated_from_revision": null}, "body_sha256": "53397a0b0f542fd9a7c78ab8a92b46bd33497ce0098297777362f40ad8560af9", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span class=\"productname\">GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a class=\"ulink\" href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span class=\"productname\">PostgreSQL</span> \u652f\u6301 <span class=\"productname\">GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span class=\"productname\">GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span class=\"productname\">GSSAPI</span> \u52a0\u5bc6\u6216 <acronym class=\"acronym\">SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span class=\"productname\">PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a class=\"xref\" href=\"/zh/docs/18/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span class=\"productname\">GSSAPI</span> \u4f7f\u7528 <span class=\"productname\">Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code class=\"literal\"><em class=\"replaceable\"><code>servicename</code></em>/<em class=\"replaceable\"><code>hostname</code></em>@<em class=\"replaceable\"><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span class=\"productname\">PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em class=\"firstterm\">keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em class=\"replaceable\"><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code class=\"literal\">postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span class=\"application\">libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a class=\"xref\" href=\"/zh/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em class=\"replaceable\"><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span class=\"application\">libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/18/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "version": "18", "link_map": {"/zh/docs/18/gssapi-auth.html": "/docs/18/gssapi-auth.html", "/zh/docs/18/installation.html": "/docs/18/installation.html", "/zh/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME": "/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME"}, "body_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/18/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/18/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "body_sha256": "1ab75ef54a6c3e972e714cea0910a7a2b70ea84adc821a11ba06753f5ad7ece2", "content_hash": "ccb583f703d83bd44772fc28d06b519b8c5c44e2ab596ac3bb2cea86fa321b68", "source_database": "center", "source_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "include_realm", "description": "\u5982\u679c\u8bbe\u4e3a 0\uff0c\u5219\u5728\u901a\u8fc7\u7528\u6237\u540d\u6620\u5c04\uff08 \u7b2c 20.2 \u8282 \uff09\u4e4b\u524d\uff0c\u4f1a\u5148\u4ece\u5df2\u8ba4\u8bc1\u7528\u6237\u7684\u4e3b\u4f53\u540d\u4e2d\u53bb\u6389 realm \u540d\u79f0\u3002\u4e0d\u5efa\u8bae\u8fd9\u6837\u505a\uff1b\u5b83\u4e3b\u8981\u662f\u4e3a\u4e86\u5411\u540e\u517c\u5bb9\u800c\u4fdd\u7559\u7684\uff0c\u56e0\u4e3a\u5728\u591a realm \u73af\u5883\u4e2d\u8fd9\u5e76\u4e0d\u5b89\u5168\uff0c\u9664\u975e\u540c\u65f6\u4f7f\u7528\u4e86 krb_realm \u3002\u5efa\u8bae\u5c06 include_realm \u4fdd\u6301\u4e3a\u9ed8\u8ba4\u503c\uff081\uff09\uff0c\u5e76\u5728 pg_ident.conf \u4e2d\u63d0\u4f9b\u663e\u5f0f\u6620\u5c04\uff0c\u628a\u4e3b\u4f53\u540d\u8f6c\u6362\u6210 PostgreSQL \u7528\u6237\u540d\u3002"}, {"name": "map", "description": "\u5141\u8bb8\u628a\u5ba2\u6237\u7aef\u4e3b\u4f53\u6620\u5c04\u4e3a\u6570\u636e\u5e93\u7528\u6237\u540d\u3002\u8be6\u89c1 \u7b2c 20.2 \u8282 \u3002\u5bf9\u4e8e GSSAPI/Kerberos \u4e3b\u4f53\uff0c\u4f8b\u5982 username@EXAMPLE.COM \uff08\u6216\u8005\u8f83\u5c11\u89c1\u7684 username/hostbased@EXAMPLE.COM \uff09\uff0c\u7528\u4e8e\u6620\u5c04\u7684\u7528\u6237\u540d\u5206\u522b\u662f username@EXAMPLE.COM \uff08\u6216 username/hostbased@EXAMPLE.COM \uff09\uff0c\u9664\u975e\u5df2\u7ecf\u5c06 include_realm \u8bbe\u4e3a 0\uff1b\u5728\u90a3\u79cd\u60c5\u51b5\u4e0b\uff0c\u6620\u5c04\u65f6\u89c6\u4e3a\u7cfb\u7edf\u7528\u6237\u540d\u7684\u662f username \uff08\u6216 username/hostbased \uff09\u3002"}, {"name": "krb_realm", "description": "\u8bbe\u7f6e\u7528\u4e8e\u5339\u914d\u7528\u6237\u4e3b\u4f53\u540d\u7684 realm\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\u8be5\u53c2\u6570\uff0c\u5219\u53ea\u63a5\u53d7\u6765\u81ea\u8be5 realm \u7684\u7528\u6237\uff1b\u5982\u679c\u672a\u8bbe\u7f6e\uff0c\u5219\u5141\u8bb8\u6765\u81ea\u4efb\u610f realm \u7684\u7528\u6237\u8fde\u63a5\uff0c\u4f46\u4ecd\u53d7\u5df2\u6267\u884c\u7684\u7528\u6237\u540d\u6620\u5c04\u7ea6\u675f\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "gss", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002"], "manual_html": "", "manual_path": "/docs/18/gssapi-auth.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/18/gssapi-auth.html", "method": "same-major semantic node", "sha256": "9d738f27e484913c783da4fab3912a12c933c2d71acac2667824242d9c6763f9", "language": "zh", "matched_nodes": ["#GSSAPI-AUTH/div[0]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[1]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[3]", "#GSSAPI-AUTH/div[12]/dl[0]/dd[5]", "#GSSAPI-AUTH/p[11]", "#GSSAPI-AUTH/p[13]", "#GSSAPI-AUTH/p[2]", "#GSSAPI-AUTH/p[3]", "#GSSAPI-AUTH/p[4]", "#GSSAPI-AUTH/p[5]", "#GSSAPI-AUTH/p[6]", "#GSSAPI-AUTH/p[8]", "#GSSAPI-AUTH/p[9]"]}], "language": "zh", "original_text": {"/versions/18/description/0": "Use GSSAPI to authenticate the user. This is only available for TCP/IP connections. See Section 20.6 for details. It can be used in conjunction with GSSAPI encryption.", "/versions/18/facts/0/label": "Method", "/versions/18/facts/1/label": "Configuration", "/versions/18/facts/2/label": "Inventory", "/versions/18/facts/2/value": "User-visible source authentication method", "/versions/18/tables/0/title": "Documented method options and alternatives", "/versions/18/tables/0/columns/0/label": "Option or term", "/versions/18/tables/0/columns/1/label": "Meaning", "/versions/18/tables/0/rows/0/description": "If set to 0, the realm name from the authenticated user principal is stripped off before being passed through the user name mapping ( Section 20.2 ). This is discouraged and is primarily available for backwards compatibility, as it is not secure in multi-realm environments unless krb_realm is also used. It is recommended to leave include_realm set to the default (1) and to provide an explicit mapping in pg_ident.conf to convert principal names to PostgreSQL user names.", "/versions/18/tables/0/rows/1/description": "Allows mapping from client principals to database user names. See Section 20.2 for details. For a GSSAPI/Kerberos principal, such as username@EXAMPLE.COM (or, less commonly, username/hostbased@EXAMPLE.COM ), the user name used for mapping is username@EXAMPLE.COM (or username/hostbased@EXAMPLE.COM , respectively), unless include_realm has been set to 0, in which case username (or username/hostbased ) is what is seen as the system user name when mapping.", "/versions/18/tables/0/rows/2/description": "Sets the realm to match user principal names against. If this parameter is set, only users of that realm will be accepted. If it is not set, users of any realm can connect, subject to whatever user name mapping is done."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "f2983abaf29f5ca64050dbb361234b4bd69608ca59f4e4eddf1bdc3939c3efe1", "canonical_center_text_hash": "ccb583f703d83bd44772fc28d06b519b8c5c44e2ab596ac3bb2cea86fa321b68"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002", "comparison_data": {"method": "gss", "documented_option_names": ["include_realm", "krb_realm", "map"]}, "comparison_hash": "c58b84e18bba9d75d595bab34b326eb6a8580a80636f79642c4af8843e7123cf", "manual_language": "zh", "description_zh_html": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\" rel=\"nofollow\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 <acronym>SSL</acronym> \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/zh/docs/18/installation.html\" rel=\"nofollow\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/zh/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\" rel=\"nofollow\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/zh/docs/18/gssapi-auth.html\" rel=\"nofollow\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>", "center_zh_rendered": "<p>\u8ba4\u8bc1\u65b9\u6cd5 gss\u3002</p><dl><dt>\u7d22\u5f15\u8bbf\u95ee\u65b9\u6cd5</dt><dd><code>gss</code></dd><dt>\u914d\u7f6e</dt><dd><code>pg_hba.conf</code></dd></dl><h3>\u540c\u7248\u672c\u4e2d\u6587\u624b\u518c\u8282\u9009</h3><p>\n<span>GSSAPI</span> \u662f\u4e00\u79cd\u5728\n    <a href=\"https://datatracker.ietf.org/doc/html/rfc2743\">RFC 2743</a>\n    \u4e2d\u5b9a\u4e49\u7684\u5b89\u5168\u8ba4\u8bc1\u884c\u4e1a\u6807\u51c6\u534f\u8bae\u3002<span>PostgreSQL</span> \u652f\u6301 <span>GSSAPI</span> \u7528\u4e8e\u8ba4\u8bc1\u3001\u901a\u4fe1\u52a0\u5bc6\uff0c\u6216\u4e24\u8005\u517c\u800c\u6709\u4e4b\u3002<span>GSSAPI</span> \u4e3a\u652f\u6301\u5b83\u7684\u7cfb\u7edf\u63d0\u4f9b\u81ea\u52a8\u8ba4\u8bc1\uff08\u5355\u70b9\u767b\u5f55\uff09\u3002\u8ba4\u8bc1\u672c\u8eab\u662f\u5b89\u5168\u7684\u3002\u5982\u679c\u4f7f\u7528 <span>GSSAPI</span> \u52a0\u5bc6\u6216 SSL \u52a0\u5bc6\uff0c\u6cbf\u6570\u636e\u5e93\u8fde\u63a5\u53d1\u9001\u7684\u6570\u636e\u5c06\u88ab\u52a0\u5bc6\uff1b\u5426\u5219\uff0c\u5c06\u4e0d\u4f1a\u88ab\u52a0\u5bc6\u3002\n</p><p>\n    \u5f53\u7f16\u8bd1 <span>PostgreSQL</span> \u65f6\uff0cGSSAPI \u652f\u6301\u5fc5\u987b\u88ab\u542f\u7528\uff0c\u8be6\u89c1<a href=\"/docs/18/installation.html\">\u7b2c\u00a017\u00a0\u7ae0</a>\u3002\n   </p><p>\n    \u5f53 <span>GSSAPI</span> \u4f7f\u7528 <span>Kerberos</span> \u65f6\uff0c\u5b83\u4f1a\u4f7f\u7528\u4e00\u4e2a\u6807\u51c6\u7684\u670d\u52a1\u4e3b\u4f53\uff08\u8ba4\u8bc1\u8eab\u4efd\uff09\u540d\u79f0\uff0c\u5176\u683c\u5f0f\u4e3a <code><em><code>servicename</code></em>/<em><code>hostname</code></em>@<em><code>realm</code></em></code>\u3002\u67d0\u4e2a\u5b89\u88c5\u5b9e\u9645\u4f7f\u7528\u7684\u4e3b\u4f53\u540d\uff08principal name\uff09\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u786c\u7f16\u7801\u5728 <span>PostgreSQL</span> \u670d\u52a1\u5668\u4e2d\uff1b\u76f8\u53cd\uff0c\u5b83\u662f\u5728\u670d\u52a1\u5668\u8bfb\u53d6\u7684 <em>keytab</em> \u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\uff0c\u670d\u52a1\u5668\u636e\u6b64\u786e\u5b9a\u81ea\u5df1\u7684\u8eab\u4efd\u3002\u5982\u679c keytab \u6587\u4ef6\u4e2d\u5217\u51fa\u4e86\u591a\u4e2a\u4e3b\u4f53\uff0c\u670d\u52a1\u5668\u4f1a\u63a5\u53d7\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u3002\u670d\u52a1\u5668\u7684 realm \u540d\u79f0\u662f\u670d\u52a1\u5668\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p>\n    \u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u5fc5\u987b\u77e5\u9053\u5b83\u6253\u7b97\u8fde\u63a5\u7684\u670d\u52a1\u5668\u4e3b\u4f53\u540d\u3002\u8be5\u4e3b\u4f53\u540d\u4e2d\u7684 <em><code>servicename</code></em> \u90e8\u5206\u901a\u5e38\u662f <code>postgres</code>\uff0c\u4f46\u4e5f\u53ef\u4ee5\u901a\u8fc7 <span>libpq</span> \u7684\u8fde\u63a5\u53c2\u6570 <a href=\"/docs/18/libpq-connect.html#LIBPQ-CONNECT-KRBSRVNAME\">krbsrvname</a> \u9009\u62e9\u5176\u4ed6\u503c\u3002<em><code>hostname</code></em> \u90e8\u5206\u5219\u662f <span>libpq</span> \u88ab\u544a\u77e5\u8981\u8fde\u63a5\u7684\u5b8c\u5168\u9650\u5b9a\u4e3b\u673a\u540d\u3002realm \u540d\u79f0\u662f\u5ba2\u6237\u7aef\u53ef\u8bbf\u95ee\u7684 Kerberos \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u9996\u9009 realm\u3002\n   </p><p><a href=\"/docs/18/gssapi-auth.html\">\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587</a>\u3002</p>"}, "comparison": {"left": "17", "right": "18", "status": "unchanged", "diff": ""}}