Date: Thu, 19 Sep 2024 17:50:27 +0200
From: Holger Jakobs <holger@jakobs.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: How to make superuser from non superuser in PostgreSQL
User-Agent: K-9 Mail for Android
In-Reply-To: 
 <CAKFQuwZQHrFDsy3C5kL+atJD-dEj+YEXdN0inci1aq-fbCROrg@mail.gmail.com>
References: 
 <CAEQOu1F5NDuv556QtNyqFEPyu4r+3SJAeTsSwGDU6_ECCEDxOA@mail.gmail.com>
 <CAKFQuwZQHrFDsy3C5kL+atJD-dEj+YEXdN0inci1aq-fbCROrg@mail.gmail.com>
Message-ID: <1D39ED30-ABEB-4F1A-9080-B42539F78AFA@jakobs.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary=----0PSB4KZGWL136WNTJSRW3G1N2A2AZ7
Content-Transfer-Encoding: 7bit
Archived-At: 
 <https://www.postgresql.org/message-id/1D39ED30-ABEB-4F1A-9080-B42539F78AFA%40jakobs.com>
Precedence: bulk

------0PSB4KZGWL136WNTJSRW3G1N2A2AZ7
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

If the database system is running on a machine you have access to, you migh=
t start it in single user mode and establish a new superuser role or change=
 the password=2E=20

Directly from SQL this isn't possible as it would make all restrictions us=
eless=2E=20

--=20
Holger Jakobs, Bergisch Gladbach=20
Tel=2E +49 178 9759012

Am 19=2E September 2024 17:06:57 MESZ schrieb "David G=2E Johnston" <david=
=2Eg=2Ejohnston@gmail=2Ecom>:
>On Thursday, September 19, 2024, Sunil Jadhav <sunilbjpatil@gmail=2Ecom>
>wrote:
>
>>
>> I don't know the superuser password?
>>
>>
>You will need to figure out a way to login as the (an?) existing
>superuser=2E  Typically a password is not required since the pg_hba=2Econ=
f file
>usually has a =E2=80=9Clocal postgres postgres peer=E2=80=9D (or equivale=
nt) entry which
>lets the DBA become the OS postgres (or whatever user owns the service)
>user and then just connect to the cluster using the postgres role=2E
>Regardless, your ability to becomes superuser depends at this point on
>being able to become the OS user that owns the PostgreSQL service so you
>can modify pg_hba=2Econf to let you login=2E
>
>David J=2E

------0PSB4KZGWL136WNTJSRW3G1N2A2AZ7
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head></head><body><div dir=3D"auto">If the database system is runnin=
g on a machine you have access to, you might start it in single user mode a=
nd establish a new superuser role or change the password=2E <br><br>Directl=
y from SQL this isn't possible as it would make all restrictions useless=2E=
 <br></div><div dir=3D"auto"><div class=3D'k9mail-signature'>-- <br>Holger =
Jakobs, Bergisch Gladbach <br>Tel=2E +49 178 9759012</div></div><br><br><di=
v class=3D"gmail_quote"><div dir=3D"auto">Am 19=2E September 2024 17:06:57 =
MESZ schrieb "David G=2E Johnston" &lt;david=2Eg=2Ejohnston@gmail=2Ecom&gt;=
:</div><blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0=2E8=
ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<br><br>On Thursday, September 19, 2024, Sunil Jadhav &lt;<a href=3D"mailt=
o:sunilbjpatil@gmail=2Ecom">sunilbjpatil@gmail=2Ecom</a>&gt; wrote:<br><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0 0 0 =2E8ex;border-left:1px =
#ccc solid;padding-left:1ex"><div dir=3D"auto"><br><div dir=3D"auto">I don'=
t know the superuser password?</div><div dir=3D"auto"><br></div></div></blo=
ckquote><div><br></div><div>You will need to figure out a way to login as t=
he (an?) existing superuser=2E&nbsp; Typically a password is not required s=
ince the pg_hba=2Econf file usually has a =E2=80=9Clocal postgres postgres =
peer=E2=80=9D (or equivalent) entry which lets the DBA become the OS postgr=
es (or whatever user owns the service) user and then just connect to the cl=
uster using the postgres role=2E&nbsp; Regardless, your ability to becomes =
superuser depends at this point on being able to become the OS user that ow=
ns the PostgreSQL service so you can modify pg_hba=2Econf to let you login=
=2E<br></div><div><br></div><div>David J=2E</div><div><br></div>
</blockquote></div></body></html>
------0PSB4KZGWL136WNTJSRW3G1N2A2AZ7--