summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorPeter Eisentraut <peter_e@gmx.net>2017-03-09 08:27:16 -0500
committerPeter Eisentraut <peter_e@gmx.net>2017-03-09 08:39:44 -0500
commitbe37c2120a2a88e5ba852d42952c77b6bf5d5271 (patch)
treec6862bda00c4392427b3a9c96836cac7fb21a3e3 /doc
parent355d3993c53ed62c5b53d020648e4fbcfbf5f155 (diff)
downloadpostgresql-be37c2120a2a88e5ba852d42952c77b6bf5d5271.tar.gz
Enable replication connections by default in pg_hba.conf
initdb now initializes a pg_hba.conf that allows replication connections from the local host, same as it does for regular connections. The connecting user still needs to have the REPLICATION attribute or be a superuser. The intent is to allow pg_basebackup from the local host to succeed without requiring additional configuration. Michael Paquier <michael.paquier@gmail.com> and me
Diffstat (limited to 'doc')
-rw-r--r--doc/src/sgml/ref/initdb.sgml16
1 files changed, 11 insertions, 5 deletions
diff --git a/doc/src/sgml/ref/initdb.sgml b/doc/src/sgml/ref/initdb.sgml
index 1aaa4901af..d9faa96021 100644
--- a/doc/src/sgml/ref/initdb.sgml
+++ b/doc/src/sgml/ref/initdb.sgml
@@ -120,11 +120,17 @@ PostgreSQL documentation
<term><option>--auth=<replaceable class="parameter">authmethod</replaceable></option></term>
<listitem>
<para>
- This option specifies the authentication method for local users used
- in <filename>pg_hba.conf</> (<literal>host</literal>
- and <literal>local</literal> lines). Do not use <literal>trust</>
- unless you trust all local users on your system. <literal>trust</> is
- the default for ease of installation.
+ This option specifies the default authentication method for local
+ users used in <filename>pg_hba.conf</> (<literal>host</literal>
+ and <literal>local</literal> lines). <command>initdb</command> will
+ prepopulate <filename>pg_hba.conf</filename> entries using the
+ specified authentication method for non-replication as well as
+ replication connections.
+ </para>
+
+ <para>
+ Do not use <literal>trust</> unless you trust all local users on your
+ system. <literal>trust</> is the default for ease of installation.
</para>
</listitem>
</varlistentry>