Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id 04FE763256E for ; Wed, 30 Jun 2010 17:02:53 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 52464-06 for ; Wed, 30 Jun 2010 20:02:45 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from ndmsnpf03.ndc.nasa.gov (ndmsnpf03.ndc.nasa.gov [198.117.0.123]) by mail.postgresql.org (Postfix) with ESMTP id E40C56324A1 for ; Wed, 30 Jun 2010 17:02:45 -0300 (ADT) Received: from ndmsppt04.ndc.nasa.gov (ndmsppt04.ndc.nasa.gov [198.117.0.103]) by ndmsnpf03.ndc.nasa.gov (Postfix) with ESMTP id C59E11807B9; Wed, 30 Jun 2010 15:02:44 -0500 (CDT) Received: from ndmshub02.ndc.nasa.gov (ndmshub02-pub.ndc.nasa.gov [198.117.0.161]) by ndmsppt04.ndc.nasa.gov (8.14.3/8.14.3) with ESMTP id o5UK2iuI024042; Wed, 30 Jun 2010 15:02:44 -0500 Received: from LRC000959195.larc.nasa.gov (198.119.134.170) by smtp02.ndc.nasa.gov (198.117.0.161) with Microsoft SMTP Server (TLS) id 8.2.247.2; Wed, 30 Jun 2010 15:02:44 -0500 Message-ID: <4C2BA2DF.2090900@nasa.gov> Date: Wed, 30 Jun 2010 16:02:39 -0400 From: "Maria L. Wilson" Reply-To: Organization: SSAI User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: "Plugge, Joe R." CC: "Wilson, Maria Louise (LARC-E301)[SCIENCE SYSTEMS APPLICATIONS]" , "pgsql-admin@postgresql.org" Subject: Re: postgres database user account References: <4C2B97BE.7040405@nasa.gov> In-Reply-To: Content-Type: text/plain; charset="ISO-8859-1"; format=flowed Content-Transfer-Encoding: 7bit X-Proofpoint-Virus-Version: vendor=fsecure engine=1.12.8161:2.4.5, 1.2.40, 4.0.166 definitions=2010-06-29_03:2010-02-06, 2010-06-29, 2010-06-30 signatures=0 X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-2.311 tagged_above=-10 required=5 tests=BAYES_20=-0.001, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: X-Archive-Number: 201006/228 X-Sequence-Number: 35006 ok - thanks that makes sense.... so what about the operating system account that is different? What we are planning on doing with the OS acct (postgres) is only allowing users sudo ability to this account. Nobody should be able to directly log into it. Do you think that will cause problems? thanks again - Maria Plugge, Joe R. wrote: > Yes, you can create a role that is a superuser that should be able to do internal work: > > CREATE ROLE myuser; > ALTER ROLE myuser WITH SUPERUSER INHERIT CREATEROLE CREATEDB LOGIN PASSWORD 'mypassword' VALID UNTIL 'infinity'; > > If you are talking about the operating system account named postgres, then this is a different question. > > -----Original Message----- > From: pgsql-admin-owner@postgresql.org [mailto:pgsql-admin-owner@postgresql.org] On Behalf Of Maria L. Wilson > Sent: Wednesday, June 30, 2010 2:15 PM > To: pgsql-admin@postgresql.org > Subject: [ADMIN] postgres database user account > > Hoping someone out there can answer this general question(s).... I am > having to justify having access to the "postgres" database user account > to do DBA type work..... > Is there any specific items that require the postgres database user > account to run? > > Can any general user (with superuser permission) basically do what this > postgres account does? > > thanks, Maria Wilson > Nasa/Langley Research Center > Hampton, Virginia 23681 > >