doc: clarify that SSPI and GSSAPI are interchangeable

Reported-by: tpo_deb@sourcepole.ch

Discussion: https://postgr.es/m/167846222574.1803490.15815104179136215862@wrigleys.postgresql.org

Backpatch-through: 11
This commit is contained in:
Bruce Momjian 2023-10-10 16:51:08 -04:00
parent 8e78f0a159
commit 8a6d68fc68
1 changed files with 6 additions and 4 deletions

View File

@ -1505,10 +1505,12 @@ omicron bryanh guest1
<literal>negotiate</literal> mode, which will use
<productname>Kerberos</productname> when possible and automatically
fall back to <productname>NTLM</productname> in other cases.
<productname>SSPI</productname> authentication only works when both
server and client are running <productname>Windows</productname>,
or, on non-Windows platforms, when <productname>GSSAPI</productname>
is available.
<productname>SSPI</productname> and <productname>GSSAPI</productname>
interoperate as clients and servers, e.g., an
<productname>SSPI</productname> client can authenticate to an
<productname>GSSAPI</productname> server. It is recommended to use
<productname>SSPI</productname> on Windows clients and servers and
<productname>GSSAPI</productname> on non-Windows platforms.
</para>
<para>