Re: Missed information about clientname=CN option

2024-02-01 Thread David G. Johnston
On Thu, Feb 1, 2024 at 3:16 AM Daniel Gustafsson wrote: > > On 1 Feb 2024, at 08:35, David G. Johnston > wrote: > > > maybe move the wording to the cert page and replace the content in > pg_hba.conf with a link to there. Leaning toward the later ATM. > > That sounds like the best option IMHO, c

Re: CREATE ROLE inheritance details

2024-02-01 Thread Bruce Momjian
On Tue, Jan 30, 2024 at 01:49:42PM -0700, David G. Johnston wrote: > Almost there I think.  The comment regarding seeing GRANT really applies to IN > ROLE, ROLE, and ADMIN.  Repeating it seemed a poor choice and upon thinking > further it really makes sense to consider how this command and GRANT wo

Re: Missed information about clientname=CN option

2024-02-01 Thread Daniel Gustafsson
> On 1 Feb 2024, at 08:35, David G. Johnston wrote: > maybe move the wording to the cert page and replace the content in > pg_hba.conf with a link to there. Leaning toward the later ATM. That sounds like the best option IMHO, care to propose a patch? -- Daniel Gustafsson

Re: unknown option --subject

2024-02-01 Thread Daniel Gustafsson
> On 31 Jan 2024, at 18:21, PG Doc comments form wrote: > On this page this command does not work > `openssl x509 -in myclient.crt -noout --subject -nameopt RFC2253` > unknown option --subject > > We should use only one dash `-subject` That's correct, it should be a single dash. Thanks for the