From: Jan Lentfer <Jan.Lentfer@web.de>
To: c k <shreeseva.learning@gmail.com>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: Disable TRUST authentication mode
Date: Sat, 10 Mar 2012 16:28:14 +0100
Message-ID: <4F5B730E.4020402@web.de> (raw)
In-Reply-To: <CAN2Y=uMTg1YaT-=3jQGNafA84spi=fPQ=-3B+GP0raq=oWvZmA@mail.gmail.com>
References: <CAN2Y=uMt7CPkxZhAUfw7SzecKdWCWsUuLmh4XPhUxKqBtdUoyA@mail.gmail.com>
<4F5B6EB6.9080507@web.de>
<4F5B7033.4010502@web.de>
<CAN2Y=uMTg1YaT-=3jQGNafA84spi=fPQ=-3B+GP0raq=oWvZmA@mail.gmail.com>
Am 10.03.2012 16:21, schrieb c k:
> It we can disable the TRUST mode then every user have to login with
> password and every fraud user have to know the password (at least) of
> the user. It is not the case that users from other departments share
> their passwords, but fraud users just bypasses the need to know the
> password.
If they can alter pg_hba.conf they can almost certainly also change/add
users, alter passwords, etc, etc... So from a security perspective it
doesn't buy you much.
I don't know if you could build a custom postgresql from sources with
trust disabled. But it wouldn't be worth the trouble imo.
Jan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: Jan.Lentfer@web.de, shreeseva.learning@gmail.com
Subject: Re: Disable TRUST authentication mode
In-Reply-To: <4F5B730E.4020402@web.de>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox