Received: from maia.hub.org (maia-2.hub.org [200.46.204.251]) by mail.postgresql.org (Postfix) with ESMTP id 79A1E632592 for ; Wed, 30 Jun 2010 17:12:32 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.251]) (amavisd-maia, port 10024) with ESMTP id 33048-05 for ; Wed, 30 Jun 2010 20:12:24 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from spinlock.commandprompt.com (host-215.commandprompt.net [207.173.203.215]) by mail.postgresql.org (Postfix) with ESMTP id 35245632530 for ; Wed, 30 Jun 2010 17:12:25 -0300 (ADT) Received: from localhost (localhost [127.0.0.1]) by spinlock.commandprompt.com (Postfix) with ESMTP id CCA29348034; Wed, 30 Jun 2010 13:12:23 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at commandprompt.com Received: from spinlock.commandprompt.com ([127.0.0.1]) by localhost (spinlock.commandprompt.com.commandprompt.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RtPmEY+wIPeL; Wed, 30 Jun 2010 13:12:21 -0700 (PDT) Received: from [192.168.1.100] (unknown [71.94.249.122]) by spinlock.commandprompt.com (Postfix) with ESMTPSA id 5EE4C348002; Wed, 30 Jun 2010 13:12:21 -0700 (PDT) Subject: Re: postgres database user account From: "Joshua D. Drake" Reply-To: jd@commandprompt.com To: Maria.L.Wilson-1@nasa.gov Cc: "Plugge, Joe R." , "Wilson, Maria Louise (LARC-E301)[SCIENCE SYSTEMS APPLICATIONS]" , "pgsql-admin@postgresql.org" In-Reply-To: <4C2BA2DF.2090900@nasa.gov> References: <4C2B97BE.7040405@nasa.gov> <4C2BA2DF.2090900@nasa.gov> Content-Type: text/plain; charset="UTF-8" Organization: Command Prompt, Inc. Date: Wed, 30 Jun 2010 13:12:10 -0700 Message-ID: <1277928730.20538.2776.camel@jd-desktop.unknown.charter.com> Mime-Version: 1.0 X-Mailer: Evolution 2.28.3 Content-Transfer-Encoding: 7bit X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-0.5 tagged_above=-10 required=5 tests=BAYES_05=-0.5 X-Spam-Level: X-Archive-Number: 201006/230 X-Sequence-Number: 35008 On Wed, 2010-06-30 at 16:02 -0400, Maria L. Wilson wrote: > ok - thanks that makes sense.... > > so what about the operating system account that is different? What we > are planning on doing with the OS acct (postgres) is only allowing users > sudo ability to this account. Nobody should be able to directly log > into it. Do you think that will cause problems? You should treat the postgres account like root. In reality nobody should be logging in as postgres on the OS except for extremely specific purposes. Joshua D. Drake -- PostgreSQL.org Major Contributor Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579 Consulting, Training, Support, Custom Development, Engineering