From: Bruce Momjian <bruce@momjian.us> Date: Tue, 10 Oct 2023 20:51:08 +0000 (-0400) Subject: doc: clarify that SSPI and GSSAPI are interchangeable X-Git-Tag: REL_14_10~52 X-Git-Url: http://git.postgresql.org/gitweb/?a=commitdiff_plain;h=40049edfeb15f7bbce1c9d2dd9c98575ba0cb759;p=postgresql.git doc: clarify that SSPI and GSSAPI are interchangeable Reported-by: tpo_deb@sourcepole.ch Discussion: https://postgr.es/m/167846222574.1803490.15815104179136215862@wrigleys.postgresql.org Backpatch-through: 11 --- diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index e99bb5ae59f..44f8fd02b0c 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -1388,10 +1388,12 @@ omicron bryanh guest1 <literal>negotiate</literal> mode, which will use <productname>Kerberos</productname> when possible and automatically fall back to <productname>NTLM</productname> in other cases. - <productname>SSPI</productname> authentication only works when both - server and client are running <productname>Windows</productname>, - or, on non-Windows platforms, when <productname>GSSAPI</productname> - is available. + <productname>SSPI</productname> and <productname>GSSAPI</productname> + interoperate as clients and servers, e.g., an + <productname>SSPI</productname> client can authenticate to an + <productname>GSSAPI</productname> server. It is recommended to use + <productname>SSPI</productname> on Windows clients and servers and + <productname>GSSAPI</productname> on non-Windows platforms. </para> <para>