Received: from maia.hub.org (maia-3.hub.org [200.46.204.243])
	by mail.postgresql.org (Postfix) with ESMTP id 342C46325EA
	for <pgsql-admin-postgresql.org@mail.postgresql.org>;
	Wed, 30 Jun 2010 17:35:32 -0300 (ADT)
Received: from mail.postgresql.org ([200.46.204.86])
	by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia,
	port 10024) with ESMTP id 52442-07 for
	<pgsql-admin-postgresql.org@mail.postgresql.org>;
	Wed, 30 Jun 2010 20:35:24 +0000 (UTC)
X-Greylist: delayed 00:21:59.503935 by SQLgrey-1.7.6
Received: from ndjsnpf02.ndc.nasa.gov (ndjsnpf02.ndc.nasa.gov [198.117.1.122])
	by mail.postgresql.org (Postfix) with ESMTP id EB790632530
	for <pgsql-admin@postgresql.org>; Wed, 30 Jun 2010 17:35:24 -0300 (ADT)
Received: from ndmsppt04.ndc.nasa.gov (ndmsppt04.ndc.nasa.gov [198.117.0.103])
	by ndjsnpf02.ndc.nasa.gov (Postfix) with ESMTP id BC438A85F2;
	Wed, 30 Jun 2010 15:13:23 -0500 (CDT)
Received: from ndmshub02.ndc.nasa.gov (ndmshub02-pub.ndc.nasa.gov
	[198.117.0.161])
	by ndmsppt04.ndc.nasa.gov (8.14.3/8.14.3) with ESMTP id o5UKDNgc003902;
	Wed, 30 Jun 2010 15:13:23 -0500
Received: from LRC000959195.larc.nasa.gov (198.119.134.170) by
	smtp02.ndc.nasa.gov (198.117.0.161) with Microsoft SMTP Server (TLS) id
	8.2.247.2; Wed, 30 Jun 2010 15:13:23 -0500
Message-ID: <4C2BA55D.9000700@nasa.gov>
Date: Wed, 30 Jun 2010 16:13:17 -0400
From: "Maria L. Wilson" <Maria.L.Wilson-1@nasa.gov>
Reply-To: <Maria.L.Wilson-1@nasa.gov>
Organization: SSAI
User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228)
MIME-Version: 1.0
To: "jd@commandprompt.com" <jd@commandprompt.com>
CC: "Wilson, Maria Louise (LARC-E301)[SCIENCE SYSTEMS APPLICATIONS]"
	<m.l.wilson@nasa.gov>, "Plugge, Joe R." <JRPlugge@west.com>,
	"pgsql-admin@postgresql.org" <pgsql-admin@postgresql.org>
Subject: Re: postgres database user account
References: <4C2B97BE.7040405@nasa.gov>	
	<BD69807DAE0CE44CA00A8338D0FDD08302E49509A9@oma00cexmbx03.corp.westworlds.com>	
	<4C2BA2DF.2090900@nasa.gov>
	<1277928730.20538.2776.camel@jd-desktop.unknown.charter.com>
In-Reply-To: <1277928730.20538.2776.camel@jd-desktop.unknown.charter.com>
Content-Type: multipart/alternative;
	boundary="------------020703090506080208050700"
X-Proofpoint-Virus-Version: vendor=fsecure engine=1.12.8161:2.4.5, 1.2.40,
	4.0.166
	definitions=2010-06-29_03:2010-02-06, 2010-06-29,
	2010-06-30 signatures=0
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=-2.31 tagged_above=-10 required=5
	tests=BAYES_20=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3,
	T_RP_MATCHES_RCVD=-0.01
X-Spam-Level: 
X-Archive-Number: 201006/235
X-Sequence-Number: 35013

--------------020703090506080208050700
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: 7bit

and what would be those "extremely specific purposes"?

Joshua D. Drake wrote:
> On Wed, 2010-06-30 at 16:02 -0400, Maria L. Wilson wrote:
>   
>> ok - thanks that makes sense....
>>
>> so what about the operating system account that is different?  What we 
>> are planning on doing with the OS acct (postgres) is only allowing users 
>> sudo ability to this account.  Nobody should be able to directly log 
>> into it.  Do you think that will cause problems?
>>     
>
> You should treat the postgres account like root. In reality nobody
> should be logging in as postgres on the OS except for extremely specific
> purposes.
>
> Joshua D. Drake
>
>   

--------------020703090506080208050700
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
and what would be those "extremely specific purposes"?<br>
<br>
Joshua D. Drake wrote:
<blockquote
 cite="mid:1277928730.20538.2776.camel@jd-desktop.unknown.charter.com"
 type="cite">
  <pre wrap="">On Wed, 2010-06-30 at 16:02 -0400, Maria L. Wilson wrote:
  </pre>
  <blockquote type="cite">
    <pre wrap="">ok - thanks that makes sense....

so what about the operating system account that is different?  What we 
are planning on doing with the OS acct (postgres) is only allowing users 
sudo ability to this account.  Nobody should be able to directly log 
into it.  Do you think that will cause problems?
    </pre>
  </blockquote>
  <pre wrap=""><!---->
You should treat the postgres account like root. In reality nobody
should be logging in as postgres on the OS except for extremely specific
purposes.

Joshua D. Drake

  </pre>
</blockquote>
</body>
</html>

--------------020703090506080208050700--