pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedrunning postgresql with a different id other than postgres user
7+ messages / 5 participants
[nested] [flat]
* running postgresql with a different id other than postgres user
@ 2016-07-19 19:16 Maki Smith (US - IFS) <maki.smith@pwc.com>
0 siblings, 2 replies; 7+ messages in thread
From: Maki Smith (US - IFS) @ 2016-07-19 19:16 UTC (permalink / raw)
To: pgsql-admin
To meet our security requirement, we would like to use another account
other than postgres to install and run postgreSQL. Is this possible to do?
Thank you for information
-----------------------------------------------------------------------------------------------------------------------------------------
Maki Smith
______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: [MASSMAIL] running postgresql with a different id other than postgres user
@ 2016-07-19 19:25 Maki Smith (US - IFS) <maki.smith@pwc.com>
parent: Gilberto Castillo <gilberto.castillo@etecsa.cu>
0 siblings, 0 replies; 7+ messages in thread
From: Maki Smith (US - IFS) @ 2016-07-19 19:25 UTC (permalink / raw)
To: gilberto.castillo@etecsa.cu; +Cc: pgsql-admin
Is it possible we can use other user during installation?
Any concern of future patching and upgrade activity?
-----------------------------------------------------------------------------------------------------------------------------------------
Maki Smith US IT - Technical Design Authority Infrastructure |
PricewaterhouseCoopers LLP
4040 West Boy Scout Boulevard, Tampa, FL 33607 | Phn: 1.813.351.2481 | Fax:
1.813.375.6084 | RightFax: 1.813.375.6087 | Notes: maki.smith@us.pwc.com |
gmail: maki.smith@pwc.com
On Tue, Jul 19, 2016 at 4:22 PM, Gilberto Castillo <
gilberto.castillo@etecsa.cu> wrote:
>
> > To meet our security requirement, we would like to use another account
> > other than postgres to install and run postgreSQL. Is this possible to
> > do?
> >
> > Thank you for information
>
> Yes, create other user with privilegius of user postgre
>
> >
> -----------------------------------------------------------------------------------------------------------------------------------------
> > Maki Smith
> >
> > ______________________________________________________________________
> > The information transmitted, including any attachments, is intended only
> > for the person or entity to which it is addressed and may contain
> > confidential and/or privileged material. Any review, retransmission,
> > dissemination or other use of, or taking of any action in reliance upon,
> > this information by persons or entities other than the intended recipient
> > is prohibited, and all liability arising therefrom is disclaimed. If you
> > received this in error, please contact the sender and delete the material
> > from any computer. PricewaterhouseCoopers LLP is a Delaware limited
> > liability partnership. This communication may come from
> > PricewaterhouseCoopers LLP or one of its subsidiaries.
> >
>
>
> --
> Saludos,
> Gilberto Castillo
> ETECSA, La Habana, Cuba
>
>
______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: running postgresql with a different id other than postgres user
@ 2016-07-19 19:34 David G. Johnston <david.g.johnston@gmail.com>
parent: Maki Smith (US - IFS) <maki.smith@pwc.com>
1 sibling, 1 reply; 7+ messages in thread
From: David G. Johnston @ 2016-07-19 19:34 UTC (permalink / raw)
To: Maki Smith (US - IFS) <maki.smith@pwc.com>; +Cc: pgsql-admin
On Tue, Jul 19, 2016 at 3:16 PM, Maki Smith (US - IFS) <maki.smith@pwc.com>
wrote:
> To meet our security requirement, we would like to use another account
> other than postgres to install and run postgreSQL. Is this possible to do?
>
>
You need to tell us by what method you intend to install PostgreSQL, and
on what platform, before this can be usefully answered.
The documentation covers how to go about installing from source. It should
cover how to choose a label different than "postgres" if you so desire.
David J.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: [MASSMAIL] running postgresql with a different id other than postgres user
@ 2016-07-19 20:22 Gilberto Castillo <gilberto.castillo@etecsa.cu>
parent: Maki Smith (US - IFS) <maki.smith@pwc.com>
1 sibling, 1 reply; 7+ messages in thread
From: Gilberto Castillo @ 2016-07-19 20:22 UTC (permalink / raw)
To: Maki Smith (US - IFS) <maki.smith@pwc.com>; +Cc: pgsql-admin
> To meet our security requirement, we would like to use another account
> other than postgres to install and run postgreSQL. Is this possible to
> do?
>
> Thank you for information
Yes, create other user with privilegius of user postgre
> -----------------------------------------------------------------------------------------------------------------------------------------
> Maki Smith
>
> ______________________________________________________________________
> The information transmitted, including any attachments, is intended only
> for the person or entity to which it is addressed and may contain
> confidential and/or privileged material. Any review, retransmission,
> dissemination or other use of, or taking of any action in reliance upon,
> this information by persons or entities other than the intended recipient
> is prohibited, and all liability arising therefrom is disclaimed. If you
> received this in error, please contact the sender and delete the material
> from any computer. PricewaterhouseCoopers LLP is a Delaware limited
> liability partnership. This communication may come from
> PricewaterhouseCoopers LLP or one of its subsidiaries.
>
--
Saludos,
Gilberto Castillo
ETECSA, La Habana, Cuba
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: running postgresql with a different id other than postgres user
@ 2016-07-20 08:12 Wolfgang Wilhelm <wolfgang20121964@yahoo.de>
parent: David G. Johnston <david.g.johnston@gmail.com>
0 siblings, 1 reply; 7+ messages in thread
From: Wolfgang Wilhelm @ 2016-07-20 08:12 UTC (permalink / raw)
To: David G. Johnston <david.g.johnston@gmail.com>; Maki Smith (US - IFS) <maki.smith@pwc.com>; +Cc: pgsql-admin
Hello,
a little more information would be helpful.But to make things short: The user who starts the initdb command is the database admin user. When you install PostgreSQL via the tool of your distribution like apt (Debian), yum or whatever then the package manager generates the user postgres and executes initdb as user postgres.
Kind regards,Wolfgang
David G. Johnston <david.g.johnston@gmail.com> schrieb am 21:34 Dienstag, 19.Juli 2016:
On Tue, Jul 19, 2016 at 3:16 PM, Maki Smith (US - IFS) <maki.smith@pwc.com> wrote:
To meet our security requirement, we would like to use another account other than postgres to install and run postgreSQL. Is this possible to do?
You need to tell us by what method you intend to install PostgreSQL, and on what platform, before this can be usefully answered.
The documentation covers how to go about installing from source. It should cover how to choose a label different than "postgres" if you so desire.
David J.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: running postgresql with a different id other than postgres user
@ 2016-07-20 11:09 Maki Smith (US - IFS) <maki.smith@pwc.com>
parent: Wolfgang Wilhelm <wolfgang20121964@yahoo.de>
0 siblings, 1 reply; 7+ messages in thread
From: Maki Smith (US - IFS) @ 2016-07-20 11:09 UTC (permalink / raw)
To: Wolfgang Wilhelm <wolfgang20121964@yahoo.de>; +Cc: David G. Johnston <david.g.johnston@gmail.com>; pgsql-admin
I successfully installed from source with a different user other than
postgres on Ubuntu.
However now I am curious we can do any modification like this when I
install PostgreSQL via the tool, like apt-get or yum.
As you mentioned, these tools creates postgres user automatically.
If we use a tool like this, we need to create another superuser as
post-installation procedure to switch user, and stop usage of postgres
default user..
Just curious.. how people is doing this type of scenario...
-----------------------------------------------------------------------------------------------------------------------------------------
Maki Smith US IT - Technical Design Authority Infrastructure |
PricewaterhouseCoopers LLP
4040 West Boy Scout Boulevard, Tampa, FL 33607 | Phn: 1.813.351.2481 | Fax:
1.813.375.6084 | RightFax: 1.813.375.6087 | Notes: maki.smith@us.pwc.com |
gmail: maki.smith@pwc.com
On Wed, Jul 20, 2016 at 4:12 AM, Wolfgang Wilhelm <wolfgang20121964@yahoo.de
> wrote:
> Hello,
>
> a little more information would be helpful.
> But to make things short: The user who starts the initdb command is the
> database admin user. When you install PostgreSQL via the tool of your
> distribution like apt (Debian), yum or whatever then the package manager
> generates the user postgres and executes initdb as user postgres.
>
> Kind regards,
> Wolfgang
>
>
>
>
> David G. Johnston <david.g.johnston@gmail.com> schrieb am 21:34 Dienstag,
> 19.Juli 2016:
>
>
> On Tue, Jul 19, 2016 at 3:16 PM, Maki Smith (US - IFS) <maki.smith@pwc.com
> > wrote:
>
> To meet our security requirement, we would like to use another account
> other than postgres to install and run postgreSQL. Is this possible to do?
>
>
> You need to tell us by what method you intend to install PostgreSQL, and
> on what platform, before this can be usefully answered.
>
> The documentation covers how to go about installing from source. It
> should cover how to choose a label different than "postgres" if you so
> desire.
>
> David J.
>
>
>
>
______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: running postgresql with a different id other than postgres user
@ 2016-07-20 20:16 Kris Deugau <kdeugau@vianet.ca>
parent: Maki Smith (US - IFS) <maki.smith@pwc.com>
0 siblings, 0 replies; 7+ messages in thread
From: Kris Deugau @ 2016-07-20 20:16 UTC (permalink / raw)
To: pgsql-admin
Maki Smith (US - IFS) wrote:
> I successfully installed from source with a different user other than
> postgres on Ubuntu.
> However now I am curious we can do any modification like this when I
> install PostgreSQL via the tool, like apt-get or yum.
> As you mentioned, these tools creates postgres user automatically.
>
> If we use a tool like this, we need to create another superuser as
> post-installation procedure to switch user, and stop usage of postgres
> default user..
>
> Just curious.. how people is doing this type of scenario...
Can you explain your security requirement in more detail? It sounds to
me like you're going to a lot of effort for something that isn't going
to do what you want to do, or what you think it'll do.
It may also cause issues on package upgrades, because the packages will
continue to operate on the assumption that the username created by the
package is the one that Postgres is running under. You'd likely end up
running Postgres in a by-hand enough manner that you may as well just
install from source anyway.
-kgd
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2016-07-20 20:16 UTC | newest]
Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2016-07-19 19:16 running postgresql with a different id other than postgres user Maki Smith (US - IFS) <maki.smith@pwc.com>
2016-07-19 19:34 ` David G. Johnston <david.g.johnston@gmail.com>
2016-07-20 08:12 ` Wolfgang Wilhelm <wolfgang20121964@yahoo.de>
2016-07-20 11:09 ` Maki Smith (US - IFS) <maki.smith@pwc.com>
2016-07-20 20:16 ` Kris Deugau <kdeugau@vianet.ca>
2016-07-19 20:22 ` Gilberto Castillo <gilberto.castillo@etecsa.cu>
2016-07-19 19:25 ` Maki Smith (US - IFS) <maki.smith@pwc.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox