From: Alvaro Aguayo Garcia-Rada <aaguayo@opensysperu.com>
To: David <dbwagoner@gmail.com>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: Is it okay to run Postgres service account as a domain account (on Linux)?
Date: Mon, 26 Feb 2018 14:50:08 -0500 (PET)
Message-ID: <549154170.161328.1519674608867.JavaMail.zimbra@opensysperu.com> (raw)
In-Reply-To: <CACvbmBJLkZvBb8xg3pnT1JmPGZsbq-btw8sePK2TkQnu+48miw@mail.gmail.com>
References: <CACvbmBJLkZvBb8xg3pnT1JmPGZsbq-btw8sePK2TkQnu+48miw@mail.gmail.com>
Even when possible, I won't recommend it; not for postgres reasons, but for security. If someone compromises the domain account, could gain access to postgres data with no restriction. Unless there is a reason to use a domain account, of source.
Saludos,
Alvaro Aguayo
Jefe de Operaciones
Open Comb Systems E.I.R.L.
Oficina: (+51-1) 3377813 | Cel.: (+51) 995540103 | RPC: (+51) 954183248
Website: www.ocs.pe
----- Original Message -----
From: "David" <dbwagoner@gmail.com>
To: "pgsql-admin" <pgsql-admin@postgresql.org>
Sent: Monday, 26 February, 2018 11:22:34
Subject: Is it okay to run Postgres service account as a domain account (on Linux)?
Just wondering if it is recommended, or not, to run Postgres as a domain
account on Linux. If not, then why not?
Thank you,
David
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: aaguayo@opensysperu.com, dbwagoner@gmail.com
Subject: Re: Is it okay to run Postgres service account as a domain account (on Linux)?
In-Reply-To: <549154170.161328.1519674608867.JavaMail.zimbra@opensysperu.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox