Make it possible to change Kerberos/GSSAPI parameters without restarting

the postmaster. They are only used in backend processes, so it's just
a matter of re-labeling the GUCs.

diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml
index 86ccac9448cf2d58039ba94b53e4e1e298af49db..077909bdd18991a759d4d4ecdfae4050caa97997 100644 (file)
--- a/doc/src/sgml/config.sgml
+++ b/doc/src/sgml/config.sgml
@@ -1,4 +1,4 @@
-
+
 
 
   Server Configuration
@@ -621,8 +621,7 @@ SET ENABLE_SEQSCAN TO OFF;
        
         Sets the realm to match Kerberos, GSSAPI and SSPI user names against.
         See ,  or
-         for details. This parameter can only be
-        set at server start.
+         for details.
        
       
      
@@ -636,7 +635,7 @@ SET ENABLE_SEQSCAN TO OFF;
        
         Sets the location of the Kerberos server key file. See
          or  
-        for details. This parameter can only be set at server start.
+        for details.
        
       
      
@@ -649,7 +648,7 @@ SET ENABLE_SEQSCAN TO OFF;
       
        
         Sets the Kerberos service name. See 
-        for details.  This parameter can only be set at server start.
+        for details.
        
       
      
@@ -666,7 +665,7 @@ SET ENABLE_SEQSCAN TO OFF;
         the complete service principal, that is
         krb_srvname/krb_server_hostname@REALM.
         If not set, the default is the server host name.  See 
-        for details.  This parameter can only be set at server start.
+        for details.
        
       
      
@@ -680,8 +679,7 @@ SET ENABLE_SEQSCAN TO OFF;
        
         Sets whether Kerberos and GSSAPI user names should be treated
         case-insensitively.
-        The default is off (case sensitive). This parameter
-        can only be set at server start.
+        The default is off (case sensitive).
        
       
      

diff --git a/src/backend/utils/misc/guc.c b/src/backend/utils/misc/guc.c
index e881746924aba4f949b999b8ae8916c162298184..1290af8dee082b08e66c7d59690719a14db9d172 100644 (file)
--- a/src/backend/utils/misc/guc.c
+++ b/src/backend/utils/misc/guc.c
@@ -10,7 +10,7 @@
  * Written by Peter Eisentraut .
  *
  * IDENTIFICATION
- *   $PostgreSQL: pgsql/src/backend/utils/misc/guc.c,v 1.486 2009/01/02 02:02:10 tgl Exp $
+ *   $PostgreSQL: pgsql/src/backend/utils/misc/guc.c,v 1.487 2009/01/02 10:33:20 mha Exp $
  *
  *--------------------------------------------------------------------
  */
@@ -1144,7 +1144,7 @@ static struct config_bool ConfigureNamesBool[] =
    },
 
    {
-       {"krb_caseins_users", PGC_POSTMASTER, CONN_AUTH_SECURITY,
+       {"krb_caseins_users", PGC_SIGHUP, CONN_AUTH_SECURITY,
            gettext_noop("Sets whether Kerberos and GSSAPI user names should be treated as case-insensitive."),
            NULL
        },
@@ -2123,7 +2123,7 @@ static struct config_string ConfigureNamesString[] =
    },
 
    {
-       {"krb_realm", PGC_POSTMASTER, CONN_AUTH_SECURITY,
+       {"krb_realm", PGC_SIGHUP, CONN_AUTH_SECURITY,
            gettext_noop("Sets realm to match Kerberos and GSSAPI users against."),
            NULL,
            GUC_SUPERUSER_ONLY
@@ -2133,7 +2133,7 @@ static struct config_string ConfigureNamesString[] =
    },
 
    {
-       {"krb_server_keyfile", PGC_POSTMASTER, CONN_AUTH_SECURITY,
+       {"krb_server_keyfile", PGC_SIGHUP, CONN_AUTH_SECURITY,
            gettext_noop("Sets the location of the Kerberos server key file."),
            NULL,
            GUC_SUPERUSER_ONLY
@@ -2143,7 +2143,7 @@ static struct config_string ConfigureNamesString[] =
    },
 
    {
-       {"krb_srvname", PGC_POSTMASTER, CONN_AUTH_SECURITY,
+       {"krb_srvname", PGC_SIGHUP, CONN_AUTH_SECURITY,
            gettext_noop("Sets the name of the Kerberos service."),
            NULL
        },
@@ -2152,7 +2152,7 @@ static struct config_string ConfigureNamesString[] =
    },
 
    {
-       {"krb_server_hostname", PGC_POSTMASTER, CONN_AUTH_SECURITY,
+       {"krb_server_hostname", PGC_SIGHUP, CONN_AUTH_SECURITY,
            gettext_noop("Sets the hostname of the Kerberos server."),
            NULL
        },