DMARC-Filter: OpenDMARC Filter v1.3.2 mta-p7.oit.umn.edu 4XLhfm57ghz9vBs4
MIME-Version: 1.0
References: <CAOLfK3Vj-PFBJi28y1170ZP3dGeW2qpG_8_9CbaJWvEgXQ8-jQ@mail.gmail.com>
 <CAKFQuwYG8uQhN50MgcF1seg8+dwvgTMFez=wA3Rg2rosob78cg@mail.gmail.com>
 <CAOLfK3XOHnyWsLv_CdFAegWg1FgM3AK3WsO_r+rXSNjp8TQXcg@mail.gmail.com>
 <cebb02fa-5487-4c06-8527-9c8ba29c13a9@aklaver.com> <CAOLfK3V10fBPAhXHLJ6hyZ41BVZQTk=Bbq7MODX30O_REPvQrg@mail.gmail.com>
 <0c089041-d4eb-4bf4-bfcb-6451224190c9@aklaver.com> <CAOLfK3W6K-r0+v7Sa9D6684hM3Jg0UxtZ4iOwZiJsteBj0rfoQ@mail.gmail.com>
 <8fec88b9-355f-487d-95ad-103af2229fde@aklaver.com> <CAOLfK3VmUpuPzqXTqr1So7WrqszVfUzkuGEOAk0gvStZ-aCXhA@mail.gmail.com>
 <0b265bc8-5f6e-436b-850d-0b5328e9f388@aklaver.com>
In-Reply-To: <0b265bc8-5f6e-436b-850d-0b5328e9f388@aklaver.com>
From: Matt Zagrabelny <mzagrabe@d.umn.edu>
Date: Sat, 5 Oct 2024 18:37:39 -0500
Message-ID: <CAOLfK3Vnjoddno+Maj8bXoUVZWLAOgCwmotx02yyb92CMZ7zog@mail.gmail.com>
Subject: Re: grant connect to all databases
To: Adrian Klaver <adrian.klaver@aklaver.com>
Cc: "David G. Johnston" <david.g.johnston@gmail.com>, 
	"pgsql-generallists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000a8cd6f0623c346b1"
Archived-At: <https://www.postgresql.org/message-id/CAOLfK3Vnjoddno%2BMaj8bXoUVZWLAOgCwmotx02yyb92CMZ7zog%40mail.gmail.com>
Precedence: bulk

--000000000000a8cd6f0623c346b1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sat, Oct 5, 2024 at 5:43=E2=80=AFPM Adrian Klaver <adrian.klaver@aklaver=
.com>
wrote:

> On 10/5/24 15:04, Matt Zagrabelny wrote:
>
> > psql (15.8 (Debian 15.8-0+deb12u1))
> >
> >
> >     Where did you install it from or where are you running it?
> >
> >
> > Installed from Debian repos via apt via puppet.
> >
> > Still digging...
>
> To me it looks like something is doing:
>
> REVOKE CONNECT
>      ON DATABASE <some_db>
>      FROM PUBLIC;
>
>
I think we have a winner.

When puppet creates the database, it revokes connect:

https://github.com/puppetlabs/puppetlabs-postgresql/blob/main/manifests/ser=
ver/database.pp#L55-L80

I'll have to ponder a solution. :(

Thanks for all the help (David, Adrian, and Tom)! I very much appreciate
you taking time to give me some guidance and pointers.

Cheers!

-m

--000000000000a8cd6f0623c346b1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Sat, Oct 5, 2024 at 5:43=E2=80=AFP=
M Adrian Klaver &lt;<a href=3D"mailto:adrian.klaver@aklaver.com">adrian.kla=
ver@aklaver.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);pad=
ding-left:1ex">On 10/5/24 15:04, Matt Zagrabelny wrote:<br>
<br>
&gt; psql (15.8 (Debian 15.8-0+deb12u1))<br>
&gt; <br>
&gt; <br>
&gt;=C2=A0 =C2=A0 =C2=A0Where did you install it from or where are you runn=
ing it?<br>
&gt; <br>
&gt; <br>
&gt; Installed from Debian repos via apt via puppet.<br>
&gt; <br>
&gt; Still digging...<br>
<br>
To me it looks like something is doing:<br>
<br>
REVOKE CONNECT<br>
=C2=A0 =C2=A0 =C2=A0ON DATABASE &lt;some_db&gt;<br>
=C2=A0 =C2=A0 =C2=A0FROM PUBLIC;<br>
<br></blockquote><div><br></div><div>I think we have a winner.</div><div><b=
r></div><div>When puppet creates the database, it revokes connect:<br></div=
><div><br></div><div><a href=3D"https://github.com/puppetlabs/puppetlabs-po=
stgresql/blob/main/manifests/server/database.pp#L55-L80">https://github.com=
/puppetlabs/puppetlabs-postgresql/blob/main/manifests/server/database.pp#L5=
5-L80</a> <br></div><div><br></div><div>I&#39;ll have to ponder a solution.=
 :(</div><div><br></div><div>Thanks for all the help (David, Adrian, and To=
m)! I very much appreciate you taking time to give me some guidance and poi=
nters.</div><div><br></div><div>Cheers!</div><div><br></div><div>-m<br></di=
v></div></div>

--000000000000a8cd6f0623c346b1--