Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

postgres: describe the cn to username mapping #97

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

postgres: describe the cn to username mapping #97

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/postgresql/topics/client_auth.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ Configure `pg_hba.conf`, creating `hostssl` records with the `clientcert=1` opti
hostssl all myuser 0.0.0.0/0 md5 clientcert=1
```

Alternatively, if you'd like to disable password authentication and lean exclusively on client certificates for authentication, change from the `md5` authentication method and use the `cert` method instead. Note, however that this requires that the identity used as the Common Name in the certificate (when issued by your CA, eg. `{{ server_name }}`) exactly matches the PostgreSQL database user specified in connections from clients.
Alternatively, if you'd like to disable password authentication and lean exclusively on client certificates for authentication, change from the `md5` authentication method and use the `cert` method instead. By default, this requires that the identity used as the Common Name in the certificate (when issued by your CA, eg. `{{ server_name }}`) exactly matches the PostgreSQL database user specified in connections from clients. User name mapping can be used to allow the Common Name to be different from the database user name. See more in the PostgreSQL [docs on certificate authentication](https://www.postgresql.org/docs/current/auth-cert.html).

```ini
# ...
Expand Down