Major key (Decrypted) Cached Data (Encrypted) Object key (Encrypted) Data (Encrypted) 系统域认证+二进制文件证书认证 工作流程 GPDB透明加密解析 KMS Master key Disk Memory Major key (Encrypted) Disk Memory/Client Object

hostssl 匹配 TCP/IP 方式的 SSL 加密连接。这个配置需要配合 SSL 参数的设置， 并且在 GP 数据库启动时生效。 Greenplum Database 管理员指南 V6.2.1 版权所有：Esena(陈淼 +86 18616691889) 编写：陈淼 - 35 - hostnossl 匹配 TCP/IP 方式的非 SSL 加密连接。 database 设置该记录匹配的 原生支持客户端与 Master 服务端之间的 SSL 连接。SSL 连接可以有效的防止 Greenplum Database 管理员指南 V6.2.1 版权所有：Esena(陈淼 +86 18616691889) 编写：陈淼 - 38 - 第三方对包的窥探，防止中间层的攻击。在非安全网络环境中有必要使用 SSL，且在使 用权限认证时更为必要。使用 SSL 需要在客户端和 Master 端都安装有 端都安装有 OpenSSL。在 设置参数 ssl=on(在 Master 的 postgresql.conf 文件)后重新启动集群就开启了 SSL。在使用 SSL 模式启动时，数据库会查找 Master 目录下的 server.key(服务器 密钥)文件和 server.crt(服务器证书)文件。这些文件必须被正确的安装，否则数据 库系统将无法启动。 重要提示：不要为 server.key 设置访

279 GSSAPI Authentication 281 LDAP Authentication 282 SSL Client Authentication 284 VMware Greenplum 7 Documentation VMware by Broadcom 10 SSL Authentication Parameters 284 OpenSSL Configuration 284 284 Creating a Self-Signed Certificate 284 Configuring postgresql.conf for SSL Authentication 285 Configuring the SSL Client Connection 286 PAM-Based Authentication 287 Radius Authentication 288 RADIUS Using LDAP Authentication with TLS/SSL 831 Enabling LDAP Authentication with STARTTLS and TLS 831 Enabling LDAP Authentication with a Secure Connection and TLS/SSL 832 Configuring Authentication with

Authentication with TLS/SSL 641 Using LDAP Authentication with TLS/SSL 0 Enabling LDAP Authentication with STARTTLS and TLS 641 Enabling LDAP Authentication with a Secure Connection and TLS/SSL 641 Configuring Authentication 678 SSL Client Authentication 679 SSL Authentication Parameters 679 OpenSSL Configuration 679 Creating a Self-Signed Certificate 680 Configuring postgresql.conf for SSL Authentication 680 680 Configuring the SSL Client Connection 681 PAM-Based Authentication 682 Radius Authentication 683 RADIUS Authentication Options 683 Limiting Concurrent Connections 684 Encrypting Client/Server

Authentication with TLS/SSL 650 Using LDAP Authentication with TLS/SSL 0 Enabling LDAP Authentication with STARTTLS and TLS 650 Enabling LDAP Authentication with a Secure Connection and TLS/SSL 650 Configuring Authentication 687 SSL Client Authentication 688 SSL Authentication Parameters 688 OpenSSL Configuration 688 Creating a Self-Signed Certificate 689 Configuring postgresql.conf for SSL Authentication 689 689 Configuring the SSL Client Connection 690 PAM-Based Authentication 691 Radius Authentication 692 RADIUS Authentication Options 692 Limiting Concurrent Connections 693 Encrypting Client/Server

Authentication with TLS/SSL 573 Using LDAP Authentication with TLS/SSL 0 Enabling LDAP Authentication with STARTTLS and TLS 573 Enabling LDAP Authentication with a Secure Connection and TLS/SSL 573 Configuring Authentication 610 SSL Client Authentication 611 SSL Authentication Parameters 611 OpenSSL Configuration 611 Creating a Self-Signed Certificate 612 Configuring postgresql.conf for SSL Authentication 612 612 Configuring the SSL Client Connection 613 PAM-Based Authentication 614 Radius Authentication 615 RADIUS Authentication Options 615 Limiting Concurrent Connections 616 Encrypting Client/Server

Using LDAP Authentication with TLS/SSL 640 Enabling LDAP Authentication with STARTTLS and TLS 640 Enabling LDAP Authentication with a Secure Connection and TLS/SSL 640 Configuring Authentication with Authentication 676 SSL Client Authentication 677 SSL Authentication Parameters 677 OpenSSL Configuration 677 Creating a Self-Signed Certificate 678 Configuring postgresql.conf for SSL Authentication 678 678 Configuring the SSL Client Connection 679 PAM-Based Authentication 680 Radius Authentication 681 RADIUS Authentication Options 681 Limiting Concurrent Connections 682 Encrypting Client/Server

Authentication 415 SSL Client Authentication 416 SSL Authentication Parameters 416 OpenSSL Configuration 416 Creating a Self-Signed Certificate 417 Configuring postgresql.conf for SSL Authentication 417 417 Configuring the SSL Client Connection 418 PAM-Based Authentication 419 Radius Authentication 420 RADIUS Authentication Options 420 Limiting Concurrent Connections 420 Encrypting Client/Server Using LDAP Authentication with TLS/SSL 874 Enabling LDAP Authentication with STARTTLS and TLS 874 Enabling LDAP Authentication with a Secure Connection and TLS/SSL 875 Configuring Authentication with

Authentication 511 SSL Client Authentication 512 SSL Authentication Parameters 512 OpenSSL Configuration 513 Creating a Self-Signed Certificate 513 Configuring postgresql.conf for SSL Authentication 514 514 Configuring the SSL Client Connection 514 PAM-Based Authentication 515 Radius Authentication 516 RADIUS Authentication Options 517 Limiting Concurrent Connections 517 Encrypting Client/Server Using LDAP Authentication with TLS/SSL 1036 Enabling LDAP Authentication with STARTTLS and TLS 1036 Enabling LDAP Authentication with a Secure Connection and TLS/SSL 1036 Configuring Authentication with

Authentication 491 SSL Client Authentication 493 SSL Authentication Parameters 493 OpenSSL Configuration 493 Creating a Self-Signed Certificate 494 Configuring postgresql.conf for SSL Authentication 494 494 Configuring the SSL Client Connection 495 VMware Tanzu Greenplum 6 Documentation VMware, Inc 20 PAM-Based Authentication 496 Radius Authentication 497 RADIUS Authentication Options 497 Limiting Using LDAP Authentication with TLS/SSL 1005 Enabling LDAP Authentication with STARTTLS and TLS 1005 Enabling LDAP Authentication with a Secure Connection and TLS/SSL 1005 Configuring Authentication with