Received: from sss.pgh.pa.us (sss.pgh.pa.us [216.151.103.158])
	by postgresql.org (8.11.3/8.11.1) with ESMTP id f4D37TA90814
	for <pgsql-interfaces@postgresql.org>;
	Sat, 12 May 2001 23:07:29 -0400 (EDT)
	(envelope-from tgl@sss.pgh.pa.us)
Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1])
	by sss.pgh.pa.us (8.11.3/8.11.3) with ESMTP id f4D379R22501;
	Sat, 12 May 2001 23:07:09 -0400 (EDT)
To: "Ravil Aitov" <ravil@pi8plus.ru>
cc: pgsql-interfaces@postgresql.org
Subject: Re: Problem: Security loose 
In-reply-to: <010c01c0da1d$9e850b80$ed56fea9@pi8plus.ru> 
References: <010c01c0da1d$9e850b80$ed56fea9@pi8plus.ru>
Comments: In-reply-to "Ravil Aitov" <ravil@pi8plus.ru>
	message dated "Fri, 11 May 2001 17:23:50 +0400"
Date: Sat, 12 May 2001 23:07:09 -0400
Message-ID: <22498.989723229@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
X-Archive-Number: 200105/63
X-Sequence-Number: 1590

"Ravil Aitov" <ravil@pi8plus.ru> writes:
> Any user can connect to server (postgresql-7.1) as "postgres" using Perl
> interface:

Don't use "trust" authentication mode in pg_hba.conf if you don't trust
your users.

			regards, tom lane