Received: from maia.hub.org (maia-2.hub.org [200.46.204.251]) by mail.postgresql.org (Postfix) with ESMTP id 017076327DB for ; Wed, 30 Jun 2010 17:49:59 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.251]) (amavisd-maia, port 10024) with ESMTP id 44390-03 for ; Wed, 30 Jun 2010 20:49:50 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from imx3.etecsa.cu (imx3.etecsa.cu [200.55.152.137]) by mail.postgresql.org (Postfix) with ESMTP id 202176325EA for ; Wed, 30 Jun 2010 17:49:49 -0300 (ADT) Received: from Unknown ([192.168.91.41] helo=mn1.etecsa.cu) by imx3.etecsa.cu with ESMTP id oGmro8Ik34770; Wed, 30 Jun 2010 16:48:53 -0500 Received: (qmail 11453 invoked by uid 11187); 30 Jun 2010 21:48:53 -0000 Received: from 192.168.219.193 by mn1.etecsa.cu (envelope-from , uid 502) with qmail-scanner-2.08 (spamassassin: 3.2.5. Clear:RC:1(192.168.219.193):. Processed in 0.028672 secs); 30 Jun 2010 21:48:53 -0000 Received: from unknown (HELO [192.168.219.193]) (gilberto.castillo@[192.168.219.193]) (envelope-sender ) by mn3.etecsa.cu (qmail-ldap-1.03) with AES256-SHA encrypted SMTP for ; 30 Jun 2010 21:48:53 -0000 Subject: Re: postgres database user account From: Gilberto Castillo =?ISO-8859-1?Q?Mart=EDnez?= Reply-To: gilberto.castillo@etecsa.cu To: Maria.L.Wilson-1@nasa.gov Cc: "Plugge, Joe R." , "Wilson, Maria Louise (LARC-E301)[SCIENCE SYSTEMS APPLICATIONS]" , "pgsql-admin@postgresql.org" In-Reply-To: <4C2BA5F0.1020908@nasa.gov> References: <4C2B97BE.7040405@nasa.gov> <4C2BA2DF.2090900@nasa.gov> <4C2BA5F0.1020908@nasa.gov> Organization: ETECSA Date: Wed, 30 Jun 2010 16:49:31 -0400 Message-Id: <1277930971.23328.29.camel@gilbertoc.mtcorp.etecsa.cu> Mime-Version: 1.0 X-Mailer: Evolution 2.12.3 (2.12.3-19.el5) X-SpamTest-Envelope-From: gilberto.castillo@etecsa.cu X-SpamTest-Info: Profiles 14482 [Jun 30 2010] X-SpamTest-Info: {DNSBL Rate: low} X-SpamTest-Method: none X-SpamTest-Rate: 20 X-SpamTest-Status: Not detected X-SpamTest-Status-Extended: not_detected X-SpamTest-Version: SMTP-Filter Version 3.0.0 [0285], KAS30/SDK/Release X-Anti-Virus: Kaspersky Mail Gateway, version: 5.6.28/RELEASE, bases: 20100629T225257 #4266468, check: 20100629 clean Content-Type: multipart/mixed; boundary="=oGmtomMw73591=imx3.etecsa.cu=" X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.79 tagged_above=-10 required=5 tests=BAYES_50=0.8, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: X-Archive-Number: 201006/237 X-Sequence-Number: 35015 This is a multi-part message in MIME format. --=oGmtomMw73591=imx3.etecsa.cu= Content-Disposition: inline Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit El mié, 30-06-2010 a las 16:15 -0400, Maria L. Wilson escribió: > that sounds similar to what we are trying to accomplish. Looks like > what we need to do is use the sudo at the OS level - and remove the > postgres db user account altogether.... giving specific users the privs > (or create roles) that accomplish what they need. > or only allow IP connections and remove the sock LOCAL and remove ALL of pg_hba Usuaris -- Redards, Gilberto Castillo Edificio Beijing. Miramar Trade Center. Etecsa. Miramar, La Haban.Cuba. --=oGmtomMw73591=imx3.etecsa.cu= Content-Type: text/plain Content-Disposition: inline --- This message was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running at host imx3.etecsa.cu Visit our web-site: , --=oGmtomMw73591=imx3.etecsa.cu=--