Commit Graph

428 Commits

Author SHA1 Message Date
Bruce Momjian
ba36c48e39 Proofreading adjustments for first two parts of documentation (Tutorial
and SQL).
2009-04-27 16:27:36 +00:00
Bruce Momjian
245316e996 Improve server spoofing wording, per request from Magnus. 2009-04-24 20:46:16 +00:00
Magnus Hagander
e883d0b551 Remove sslverify parameter again, replacing it with two new sslmode values:
"verify-ca" and "verify-full".

Since "prefer" remains the default, this will make certificate validation
off by default, which should lead to less upgrade issues.
2009-04-24 09:43:10 +00:00
Peter Eisentraut
f8e5b79368 Change chapter titles thus:
III. Server Administration
15. Installation from Source Code
16. Installation from Source Code on Windows
17. Server Setup and Operation

to give users of binary installations a better idea where to start reading.

suggested by Nikolay Samokhvalov
2009-01-09 13:37:18 +00:00
Bruce Momjian
cee63eab8d Update documentation table describing how shared memory is used by
various facilities.
2008-12-18 17:03:09 +00:00
Alvaro Herrera
5434e46986 Add note to the shared memory sizing table about needing to use page count in
shared_buffers and wal_buffers, not size in bytes.  Per discussion.
2008-12-16 19:30:43 +00:00
Magnus Hagander
f179d5ea99 Add support for using SSL client certificates to authenticate to the
database (only for SSL connections, obviously).
2008-11-20 11:48:26 +00:00
Magnus Hagander
3c486fbd1c Control client certificate requesting with the pg_hba option "clientcert"
instead of just relying on the root certificate file to be present.
2008-11-20 09:29:36 +00:00
Magnus Hagander
c89404edf3 Fix libpq certificate validation for SSL connections.
Add config parameter "sslverify" to control the verification. Default
is to do full verification.

Clean up some old SSL code that never really worked.
2008-11-13 09:45:25 +00:00
Bruce Momjian
4253f016c9 Add missing colon to docs. 2008-11-04 04:18:50 +00:00
Heikki Linnakangas
15c121b3ed Rewrite the FSM. Instead of relying on a fixed-size shared memory segment, the
free space information is stored in a dedicated FSM relation fork, with each
relation (except for hash indexes; they don't use FSM).

This eliminates the max_fsm_relations and max_fsm_pages GUC options; remove any
trace of them from the backend, initdb, and documentation.

Rewrite contrib/pg_freespacemap to match the new FSM implementation. Also
introduce a new variant of the get_raw_page(regclass, int4, int4) function in
contrib/pageinspect that let's you to return pages from any relation fork, and
a new fsm_page_contents() function to inspect the new FSM pages.
2008-09-30 10:52:14 +00:00
Heikki Linnakangas
61d9674988 Make LC_COLLATE and LC_CTYPE database-level settings. Collation and
ctype are now more like encoding, stored in new datcollate and datctype
columns in pg_database.

This is a stripped-down version of Radek Strnad's patch, with further
changes by me.
2008-09-23 09:20:39 +00:00
Tom Lane
ea0382e370 Code review for recent patch to terminate online backup during shutdown:
do CancelBackup at a sane place, fix some oversights in the state transitions,
allow only superusers to connect while we are waiting for backup mode to end.
2008-04-26 22:47:40 +00:00
Magnus Hagander
c979a1fefa Prevent shutdown in normal mode if online backup is running, and
have pg_ctl warn about this.

Cancel running online backups (by renaming the backup_label file,
thus rendering the backup useless) when shutting down in fast mode.

Laurenz Albe
2008-04-23 13:44:59 +00:00
Bruce Momjian
c4fd93b3f3 Re-enable pg_terminate_backend() using SIGTERM. SIGTERM testing still
needed.
2008-04-17 20:56:41 +00:00
Bruce Momjian
76365960d2 Revert addition of pg_terminate_backend() because of race conditions. 2008-04-15 20:28:47 +00:00
Bruce Momjian
18b286f3e3 Add pg_terminate_backend() to allow terminating only a single session. 2008-04-15 13:55:12 +00:00
Tom Lane
3405f2b925 Use error message wordings for permissions checks on .pgpass and SSL private
key files that are similar to the one for the postmaster's data directory
permissions check.  (I chose to standardize on that one since it's the most
heavily used and presumably best-wordsmithed by now.)  Also eliminate explicit
tests on file ownership in these places, since the ensuing read attempt must
fail anyway if it's wrong, and there seems no value in issuing the same error
message for distinct problems.  (But I left in the explicit ownership test in
postmaster.c, since it had its own error message anyway.)  Also be more
specific in the documentation's descriptions of these checks.  Per a gripe
from Kevin Hunter.
2008-03-31 02:43:14 +00:00
Bruce Momjian
480d4f7ea5 Document that soft-mounting NFS is not recommended. 2008-03-21 14:23:37 +00:00
Peter Eisentraut
00941eea77 Add more clarification about SSH tunnels from Faheem Mitha. 2008-02-26 18:01:26 +00:00
Peter Eisentraut
f49beb3f50 In the SSH setup instructions, change
ssh -L 3333:foo.com:5432 joe@foo.com

I think this should be changed to

ssh -L 3333:localhost:5432 joe@foo.com

The reason is that this assumes the postgres server on foo.com allows
connections from foo.com, which is not allowed by the default
listen_addresses setting.  Add more detail explaining this.

pointed out by Faheem Mitha

Also change the example port number 3333 to 63333 so no one can complain
that we are stealing a reserved port number.
2008-02-26 16:07:16 +00:00
Bruce Momjian
b07e548590 Fix spelling typo in comment. 2008-01-31 23:31:33 +00:00
Bruce Momjian
694403d30e Add comment about possible URL changes for www7.hp.com:
<!-- If this URL chnages replace it with a URL to www.archive.org. -->
2008-01-31 23:30:31 +00:00
Bruce Momjian
162dc31428 Update spoofing /tmp symlink instructions to be more specific about the
name of the needed symlink file.
2008-01-31 23:03:16 +00:00
Bruce Momjian
8e9c7fe982 Document the idea of creating a symbolic link in /tmp to prevent server
spoofing when the socket file has been moved.
2008-01-31 17:22:43 +00:00
Peter Eisentraut
79a323ab49 Change /contrib to contrib for consistency. 2008-01-24 06:23:33 +00:00
Bruce Momjian
bbd3bdba3e Add URLs to two excellent web pages about SSL API and certificate usage. 2008-01-08 18:07:38 +00:00
Bruce Momjian
7dab896afc Remove tab in file name 2007-12-29 04:59:27 +00:00
Bruce Momjian
c887ae42c1 Document that null ciphers are not recommended.
Mark Mielke
2007-12-29 04:27:02 +00:00
Bruce Momjian
a8c2282fe8 Doc wording improvment. 2007-12-29 03:44:34 +00:00
Bruce Momjian
400be4ef98 Document problem with NULL SSL ciphers and man-in-the-middle attacks. 2007-12-29 03:36:56 +00:00
Bruce Momjian
a82cfcb9ee Update docs to clarify purpose of SSL key file 2007-12-25 17:06:52 +00:00
Bruce Momjian
60a6dbb76c Add two documentation tables to outline SSL file usage for client and server. 2007-12-25 06:15:34 +00:00
Bruce Momjian
08c37fd44b Add documentation section about preventing server spoofing.
Update SSL documention to be clearer about certificates, and restructure
for clarity.
2007-12-25 04:00:44 +00:00
Bruce Momjian
4c1836d522 Properly indent SGML paragraph. 2007-12-23 03:10:04 +00:00
Bruce Momjian
25e9b0e36f Remove paragraph about Linux OOM killer and fork(). Instead link to
article about OOM.
2007-12-22 05:13:03 +00:00
Bruce Momjian
cc04aaf9de Update pg_ctk/kill docs. 2007-12-17 14:00:52 +00:00
Bruce Momjian
d08e700174 Remove tab in SGML file. 2007-12-17 13:54:10 +00:00
Alvaro Herrera
048f69e242 Improve wording. 2007-12-17 13:48:31 +00:00
Bruce Momjian
7b618017fd Update OOM wording. 2007-12-16 11:24:25 +00:00
Bruce Momjian
e5a9ef55ef Add docs about OOM killer.
lst_hoe01@kwsoft.de
2007-12-16 11:22:33 +00:00
Bruce Momjian
3e4c6b5422 Mention pg_ctl kill for Win32 in docs. 2007-12-16 10:17:13 +00:00
Peter Eisentraut
9293425819 spell checker run 2007-11-28 15:42:31 +00:00
Bruce Momjian
5db1c58a1a Move NFS section into "Creating Cluster" documentation section because
it seems more logical there.
2007-11-08 15:21:03 +00:00
Bruce Momjian
1e941153a2 Working improvement. 2007-11-04 21:50:28 +00:00
Bruce Momjian
c066d27f36 Add link to NFS section from "creating a database cluster. 2007-11-04 21:48:03 +00:00
Tom Lane
388c7e28c5 Update discussion of shared memory sizing for 8.3: adjust multipliers,
mention autovacuum_max_workers.  Minor copy-editing too.
2007-11-01 19:06:01 +00:00
Bruce Momjian
2ebfe9a818 Update SSL description for when SSL root.crt/server.crt is required;
add link to libpq SSL does from server docs.

Backpatch to 8.2.X.
2007-03-30 03:19:02 +00:00
Peter Eisentraut
02284e224c Minor edits 2007-03-06 09:59:22 +00:00
Peter Eisentraut
f12f220e5a Add more information about avoiding Linux OOM killer.
by Toru SHIMOGAKI
2007-03-06 09:54:23 +00:00