diff options
| author | Michael Paquier | 2023-01-17 04:41:09 +0000 |
|---|---|---|
| committer | Michael Paquier | 2023-01-17 04:41:09 +0000 |
| commit | 0b717432ff13683f9d13f007dab1c3380cae2f0d (patch) | |
| tree | c69f58cd0525b297d71a467a9c8e46a4d5d128d6 /doc | |
| parent | da5800d5fa636c6e10c9c98402d872c76aa1c8d0 (diff) | |
Track behavior of \1 in pg_ident.conf when quoted
Entries of pg-user in pg_ident.conf that are quoted and include '\1'
allow a replacement from a subexpression in a system user regexp. This
commit adds a test to track this behavior and a note in the
documentation, as it could be affected by the use of an AuthToken for
the pg-user in the IdentLines parsed.
This subject has come up in the discussion aimed at extending the
support of pg-user in ident entries for more patterns.
Author: Jelte Fennema
Discussion: https://postgr.es/m/CAGECzQRNow4MwkBjgPxywXdJU_K3a9+Pm78JB7De3yQwwkTDew@mail.gmail.com
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/src/sgml/client-auth.sgml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index cc8c59206c..e4959663c4 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -960,6 +960,9 @@ mymap /^(.*)@otherdomain\.com$ guest will remove the domain part for users with system user names that end with <literal>@mydomain.com</literal>, and allow any user whose system name ends with <literal>@otherdomain.com</literal> to log in as <literal>guest</literal>. + Quoting a <replaceable>database-username</replaceable> containing + <literal>\1</literal> <emphasis>does not</emphasis> make + <literal>\1</literal> lose its special meaning. </para> <tip> |