Received: from localhost (maia-5.hub.org [200.46.204.182]) by postgresql.org (Postfix) with ESMTP id 578C39F9FE1 for ; Tue, 19 Dec 2006 11:37:18 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.182]) (amavisd-new, port 10024) with ESMTP id 03941-06 for ; Tue, 19 Dec 2006 11:37:06 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.4 Received: from svr4.postgresql.org (svr4.postgresql.org [66.98.251.159]) by postgresql.org (Postfix) with ESMTP id 4F19A9F9357 for ; Tue, 19 Dec 2006 11:37:12 -0400 (AST) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.3 Received: from swarthymail-a5.dreamhost.com (sd-green-bigip-202.dreamhost.com [208.97.132.202]) by svr4.postgresql.org (Postfix) with ESMTP id 4B1045AF028 for ; Tue, 19 Dec 2006 15:37:11 +0000 (GMT) Received: from [192.168.2.44] (u25-56.dsl.vianetworks.de [212.168.164.56]) by swarthymail-a5.dreamhost.com (Postfix) with ESMTP id AC9B3109EAD; Tue, 19 Dec 2006 07:37:01 -0800 (PST) Subject: Re: Embedding postgresql in my application From: Murray Cumming To: "Jeroen T. Vermeulen" Cc: pgsql-interfaces In-Reply-To: <20058.125.24.243.222.1166249768.squirrel@webmail.xs4all.nl> References: <1166225144.12609.2.camel@localhost.localdomain> <20058.125.24.243.222.1166249768.squirrel@webmail.xs4all.nl> Content-Type: text/plain Date: Tue, 19 Dec 2006 16:36:53 +0100 Message-Id: <1166542613.20613.19.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.8.1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.002 tagged_above=0 required=5 tests=AWL, BAYES_50 X-Spam-Level: X-Archive-Number: 200612/17 X-Sequence-Number: 6351 On Sat, 2006-12-16 at 13:16 +0700, Jeroen T. Vermeulen wrote: > f your application > can run under many different user identities and each should have its > own > database user, use "ident sameuser" I believe that ident authentication requires an additional service such as gidentd. Well, I think that's been my experience in the past. > and create a database user for every > system user when that user first runs the application: > > createuser -h "$DBDIR/data" \ > --no-superuser \ > --no-createrole \ > --no-createdb \ > $USERNAME createuser asks for a password on stdin. Do you know of any way to specifify an initial superuser and password for a new database cluster without doing it via stdin? That doesn't seem like a stable API that I should rely on. -- Murray Cumming murrayc@murrayc.com www.murrayc.com www.openismus.com