Thread: ERROR: (host) should be replaced by (hostnogssenc).

The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/12/encryption-options.html
Description:

Chapter 18. Server Setup and Operation
18.8. Encryption Options

Under the topic "Encrypting Data Across A Network", I think there seems to
be a documentation error.

ERROR: (host) should be replaced by (hostnogssenc).

The pg_hba.conf file allows administrators to specify which hosts can use
non-encrypted connections (host) and which require GSSAPI-encrypted
connections (hostgssenc). Also, clients can specify that they connect to
servers only on GSSAPI-encrypted connections (gssencmode=require).

Thanks,
Raj Kumar

PG Doc comments form <noreply@postgresql.org> writes:
> Under the topic "Encrypting Data Across A Network", I think there seems to
> be a documentation error.

> ERROR: (host) should be replaced by (hostnogssenc).

> The pg_hba.conf file allows administrators to specify which hosts can use
> non-encrypted connections (host) and which require GSSAPI-encrypted
> connections (hostgssenc). Also, clients can specify that they connect to
> servers only on GSSAPI-encrypted connections (gssencmode=require).

I think it's correct as it stands.  hostnogssenc would have the semantics
"hosts that MUST use non-encrypted connections".

If that were actually a useful option, maybe it would be worth lengthening
this description to mention all three options ... but it seems OK as-is to
me.

            regards, tom lane