提交 b437bdad 编写于 作者: M Marbin Tan 提交者: GitHub

gpperfmon: update gpperfmon install user doc IPv6 (#2468)

* gpperfmon: update gpperfmon install user docs IPv6

Follow up for commit c52c768e

[ci-skip]
上级 5c5771d5
......@@ -35,8 +35,9 @@
Greenplum Database master instance.</li>
<li id="ou143437">Updates the <codeph>$MASTER_DATA_DIRECTORY/pg_hba.conf</codeph> file. The
utility adds the following lines to the host-based authentication file
(<codeph>pg_hba.conf</codeph>):<codeblock>local gpperfmon gpmon md5
host all gpmon 127.0.0.1/28 md5</codeblock><note>
(<codeph>pg_hba.conf</codeph>):<codeblock>local gpperfmon gpmon md5
host all gpmon 127.0.0.1/28 md5
host all gpmon ::1/128 md5</codeblock><note>
<p>It may be necessary to edit the <codeph>pg_hba.conf</codeph> file after running the
<codeph>gpperfmon_install</codeph> utility to limit the <codeph>gpmon</codeph>
role's access to databases or to change the authentication method. After you edit the
......@@ -45,10 +46,11 @@ host all gpmon 127.0.0.1/28 md5</codeblock><note>
<li>To limit access to just the <codeph>gpperfmon</codeph> database edit the
<codeph>pg_hba.conf</codeph> file and in the host entry for the
<codeph>gpmon</codeph> user change the second field from <codeph>all</codeph> to
<codeph>gpperfmon</codeph>:<codeblock>host gpperfmon gpmon 127.0.0.1/28 md5</codeblock></li>
<codeph>gpperfmon</codeph>:<codeblock>host <b>gpperfmon</b> gpmon 127.0.0.1/28 md5
host <b>gpperfmon</b> gpmon ::1/128 md5</codeblock></li>
<li>
<p>The <codeph>gpperfmon_install</codeph> utility assumes the default MD5
authentication method. Greenplum Database may optionally be configured to use the
authentication method. Greenplum Database can optionally be configured to use the
SHA-256 or SHA-256-FIPS hash algorithm to compute the password hashes saved in the
system catalog. This is incompatible with the MD5 authentication method, which
expects an MD5 hash or clear text password in the system catalog. Because of this,
......@@ -56,16 +58,16 @@ host all gpmon 127.0.0.1/28 md5</codeblock><note>
you must edit the <codeph>pg_hba.conf</codeph> file after running the
<codeph>gpperfmon_install</codeph> utility to change the authentication method
for the <codeph>gpmon</codeph> role from <codeph>md5</codeph> to
<codeph>password</codeph>:<codeblock>local gpperfmon gpmon md5
host all gpmon 127.0.0.1/28 password</codeblock></p>
<codeph>password</codeph>:<codeblock>local gpperfmon gpmon md5
host all gpmon 127.0.0.1/28 <b>password</b>
host all gpmon ::1/128 <b>password</b></codeblock></p>
<p>The <codeph>password</codeph> authentication method submits the user's clear text
password for authentication and should not be used on an untrusted network. See
"Protecting Passwords in Greenplum Database" in the <i>Greenplum Database
Administrator Guide</i> for more information about configuring password
hashing.</p>
</li>
</ul>
</note></li>
</ul></note></li>
<li id="ou143384">Updates the password file (<codeph>.pgpass</codeph>). In order to allow
the data collection agents to connect as the <codeph>gpmon</codeph> role without a
password prompt, you must have a password file that has an entry for the
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册