Re: pg_hba.conf.sample wording improvement

2021-05-17 Thread Magnus Hagander
On Thu, Apr 29, 2021 at 5:06 PM Stephen Frost wrote: > > Greetings, > > * Magnus Hagander (mag...@hagander.net) wrote: > > On Thu, Apr 29, 2021 at 7:08 AM Peter Eisentraut > > wrote: > > > On 28.04.21 16:09, Alvaro Herrera wrote: > > > > Looking at it now, I wonder how well do the "hostno"

Re: pg_hba.conf.sample wording improvement

2021-04-30 Thread Bruce Momjian
On Wed, Apr 28, 2021 at 07:51:43AM +0200, Peter Eisentraut wrote: > I propose the attached patch to shake up the wording in the connection type > section of pg_hba.conf.sample a bit. After the hostgssenc part was added > on, the whole thing became a bit wordy, and it's also a bit inaccurate for >

Re: pg_hba.conf.sample wording improvement

2021-04-29 Thread Stephen Frost
Greetings, * Magnus Hagander (mag...@hagander.net) wrote: > On Thu, Apr 29, 2021 at 7:08 AM Peter Eisentraut > wrote: > > On 28.04.21 16:09, Alvaro Herrera wrote: > > > Looking at it now, I wonder how well do the "hostno" options work. If I > > > say "hostnogssenc", is an SSL-encrypted socket

Re: pg_hba.conf.sample wording improvement

2021-04-29 Thread Magnus Hagander
On Thu, Apr 29, 2021 at 7:08 AM Peter Eisentraut wrote: > > On 28.04.21 16:09, Alvaro Herrera wrote: > > Looking at it now, I wonder how well do the "hostno" options work. If I > > say "hostnogssenc", is an SSL-encrypted socket good? If I say > > "hostnossl", is a GSS-encrypted socket good? If

Re: pg_hba.conf.sample wording improvement

2021-04-28 Thread Peter Eisentraut
On 28.04.21 16:09, Alvaro Herrera wrote: Looking at it now, I wonder how well do the "hostno" options work. If I say "hostnogssenc", is an SSL-encrypted socket good? If I say "hostnossl", is a GSS-encrypted socket good? If so, how does that make sense? I think for example if you want to

Re: pg_hba.conf.sample wording improvement

2021-04-28 Thread Peter Eisentraut
On 28.04.21 16:20, Tom Lane wrote: Another thought is to switch the phrase order: +# - "local" is a Unix-domain socket +# - "host" is a TCP/IP socket (encrypted or not) +# - "hostssl" is a TCP/IP socket that is SSL-encrypted +# - "hostnossl" is a TCP/IP socket that is not SSL-encrypted +# -

Re: pg_hba.conf.sample wording improvement

2021-04-28 Thread Tom Lane
Alvaro Herrera writes: > Looking at it now, I wonder how well do the "hostno" options work. If I > say "hostnogssenc", is an SSL-encrypted socket good? If I say > "hostnossl", is a GSS-encrypted socket good? If so, how does that make > sense? Kind of off-topic for this thread, but I wonder if

Re: pg_hba.conf.sample wording improvement

2021-04-28 Thread Tom Lane
Peter Eisentraut writes: > I propose the attached patch to shake up the wording in the connection > type section of pg_hba.conf.sample a bit. After the hostgssenc part was > added on, the whole thing became a bit wordy, and it's also a bit > inaccurate for example in that the current wording

Re: pg_hba.conf.sample wording improvement

2021-04-28 Thread Alvaro Herrera
On 2021-Apr-28, Peter Eisentraut wrote: > I propose the attached patch to shake up the wording in the connection type > section of pg_hba.conf.sample a bit. After the hostgssenc part was added > on, the whole thing became a bit wordy, and it's also a bit inaccurate for > example in that the

Re: pg_hba.conf.sample wording improvement

2021-04-28 Thread Laurenz Albe
On Wed, 2021-04-28 at 07:51 +0200, Peter Eisentraut wrote: > I propose the attached patch to shake up the wording in the connection > type section of pg_hba.conf.sample a bit. After the hostgssenc part was > added on, the whole thing became a bit wordy, and it's also a bit > inaccurate for

pg_hba.conf.sample wording improvement

2021-04-27 Thread Peter Eisentraut
I propose the attached patch to shake up the wording in the connection type section of pg_hba.conf.sample a bit. After the hostgssenc part was added on, the whole thing became a bit wordy, and it's also a bit inaccurate for example in that the current wording for "host" appears to say that it