From 0b717432ff13683f9d13f007dab1c3380cae2f0d Mon Sep 17 00:00:00 2001
From: Michael Paquier
Date: Tue, 17 Jan 2023 13:41:09 +0900
Subject: Track behavior of \1 in pg_ident.conf when quoted
Entries of pg-user in pg_ident.conf that are quoted and include '\1'
allow a replacement from a subexpression in a system user regexp. This
commit adds a test to track this behavior and a note in the
documentation, as it could be affected by the use of an AuthToken for
the pg-user in the IdentLines parsed.
This subject has come up in the discussion aimed at extending the
support of pg-user in ident entries for more patterns.
Author: Jelte Fennema
Discussion: https://postgr.es/m/CAGECzQRNow4MwkBjgPxywXdJU_K3a9+Pm78JB7De3yQwwkTDew@mail.gmail.com
---
doc/src/sgml/client-auth.sgml | 3 +++
1 file changed, 3 insertions(+)
(limited to 'doc')
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index cc8c59206c..e4959663c4 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -960,6 +960,9 @@ mymap /^(.*)@otherdomain\.com$ guest
will remove the domain part for users with system user names that end with
@mydomain.com, and allow any user whose system name ends with
@otherdomain.com to log in as guest.
+ Quoting a database-username containing
+ \1 does not make
+ \1 lose its special meaning.
--
cgit v1.2.3