Re: [GENERAL] authentication/privileges

2013-05-10 Thread Jasen Betts
On 2013-05-10, Alvaro Herrera wrote: > Tom Lane escribió: > >> It's fairly common for distro-supplied packages to create a postgres >> OS user but not assign it any password. In that state, the only way to >> become postgres is to "su" to it from root, or perhaps from a sudoer >> account with roo

Re: [GENERAL] authentication/privileges

2013-05-10 Thread Alvaro Herrera
Tom Lane escribió: > It's fairly common for distro-supplied packages to create a postgres > OS user but not assign it any password. In that state, the only way to > become postgres is to "su" to it from root, or perhaps from a sudoer > account with root-equivalent privileges. While that might be

Re: [GENERAL] authentication/privileges

2013-05-10 Thread Tom Lane
"Sebastian P. Luque" writes: > With peer authentication, one can only login as postgres from a local > connection. I'm not sure what password the postgres user was set up in > the OS, however, I assigned one to it (the same as for the PostgreSQL > user). I've read somewhere that the postgres OS

[GENERAL] authentication/privileges

2013-05-10 Thread Sebastian P. Luque
Hi, Although I'm quite happy with the way my system (Debian sid) has set up the server (PosgreSQL 9.1), I'm not sure I'm using the authentication/privilege mechanism properly. In particular, I'd like to understand how the administrative user (postgres) is set up. Here is what pg_hba contains: #