Date: Mon, 26 Feb 2018 14:50:08 -0500 (PET)
From: Alvaro Aguayo Garcia-Rada <aaguayo@opensysperu.com>
To: David <dbwagoner@gmail.com>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Message-ID: <549154170.161328.1519674608867.JavaMail.zimbra@opensysperu.com>
In-Reply-To: 
 <CACvbmBJLkZvBb8xg3pnT1JmPGZsbq-btw8sePK2TkQnu+48miw@mail.gmail.com>
References: 
 <CACvbmBJLkZvBb8xg3pnT1JmPGZsbq-btw8sePK2TkQnu+48miw@mail.gmail.com>
Subject: Re: Is it okay to run Postgres service account as a domain account
 (on Linux)?
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Thread-Topic: Is it okay to run Postgres service account as a domain account
 (on Linux)?
Thread-Index: feN0pO7zQSO3oCg7PH1sQIlefqPd5A==
Precedence: bulk

Even when possible, I won't recommend it; not for postgres reasons, but for security. If someone compromises the domain account, could gain access to postgres data with no restriction. Unless there is a reason to use a domain account, of source.

Saludos,

Alvaro Aguayo
Jefe de Operaciones
Open Comb Systems E.I.R.L.

Oficina: (+51-1) 3377813 | Cel.: (+51) 995540103  | RPC: (+51) 954183248
Website: www.ocs.pe

----- Original Message -----
From: "David" <dbwagoner@gmail.com>
To: "pgsql-admin" <pgsql-admin@postgresql.org>
Sent: Monday, 26 February, 2018 11:22:34
Subject: Is it okay to run Postgres service account as a domain account (on Linux)?

Just wondering if it is recommended, or not, to run Postgres as a domain
account on Linux.  If not, then why not?

Thank you,

David