Message-ID: <391a608c085a9b3ba28dcea6ff891c185df1cbcf.camel@cybertec.at>
Subject: Re: Rename or Removing Postgres user
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Devendra Yadav <devendra.857@gmail.com>, pgsql-admin@lists.postgresql.org
Date: Thu, 14 Feb 2019 13:30:32 +0100
In-Reply-To: 
 <CAE+tJY9ozN5csfYz4+=nuw0ZHKPAojt=6bDVczXH4fYSx-wu2w@mail.gmail.com>
References: 
	<CAE+tJY9ozN5csfYz4+=nuw0ZHKPAojt=6bDVczXH4fYSx-wu2w@mail.gmail.com>
Organization: Cybertec
Content-Type: text/plain; charset="UTF-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Precedence: bulk

Devendra Yadav wrote:
> I want to know if I rename 'postgres' user to 'someuser' retaining it's privileges i.e superuser and other privileges. 
> 
> Or what if I drop the 'postgres' user and create a new superuser. I tried dropping Postgres user but it says "cannot drop role postgres because it is required by the database system". 
> 
> So my concern is what happens if I rename it. As far as I can check there's no impact, but in case anyone has faced issues regarding this, please suggest.

You can rename the user without any problems.
Internally, only the object ID of the role is used,
the name is just an entry in "pg_authid".

Resources outside the database proper, for example
configuration files like "pg_hba.conf", will have to
be adapted.

You cannot drop the "postgres" user, however.

You say further downthread that you want to do this
for security reasons.  Keep in mind that this is the lowest
form of security: "security by obscurity".

For better security, make sure that the superuser can
only log in from the database machine itself, and that
only administrators get shell access there.

Yours,
Laurenz Albe
-- 
Cybertec | https://www.cybertec-postgresql.com