Message-ID: <4F5B730E.4020402@web.de>
Date: Sat, 10 Mar 2012 16:28:14 +0100
From: Jan Lentfer <Jan.Lentfer@web.de>
User-Agent: Mozilla/5.0 (Windows NT 5.1;
	rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2
MIME-Version: 1.0
To: c k <shreeseva.learning@gmail.com>
CC: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: Disable TRUST authentication mode
References: 
 <CAN2Y=uMt7CPkxZhAUfw7SzecKdWCWsUuLmh4XPhUxKqBtdUoyA@mail.gmail.com>
	<4F5B6EB6.9080507@web.de> <4F5B7033.4010502@web.de>
	<CAN2Y=uMTg1YaT-=3jQGNafA84spi=fPQ=-3B+GP0raq=oWvZmA@mail.gmail.com>
In-Reply-To: 
 <CAN2Y=uMTg1YaT-=3jQGNafA84spi=fPQ=-3B+GP0raq=oWvZmA@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Am 10.03.2012 16:21, schrieb c k:
> It we can disable the TRUST mode then every user have to login with
> password and every fraud user have to know the password (at least) of
> the user. It is not the case that users from other departments share
> their passwords, but fraud users just bypasses the need to know the
> password.

If they can alter pg_hba.conf they can almost certainly also change/add 
users, alter passwords, etc, etc... So from a security perspective it 
doesn't buy you much.

I don't know if you could build a custom postgresql from sources with 
trust disabled. But it wouldn't be worth the trouble imo.

Jan