public inbox for [email protected]
help / color / mirror / Atom feedpgbouncer socket directory
5+ messages / 2 participants
[nested] [flat]
* pgbouncer socket directory
@ 2017-04-26 12:47 Peter Eisentraut <[email protected]>
2017-04-27 10:30 ` Re: pgbouncer socket directory Devrim Gündüz <[email protected]>
0 siblings, 1 reply; 5+ messages in thread
From: Peter Eisentraut @ 2017-04-26 12:47 UTC (permalink / raw)
To: pgsql-pkg-yum
The postgresql packages are configured with a socket directory
/var/run/postgresql, but pgbouncer is configured with /tmp. Those
should probably be the same, so that clients can connect to either one.
But /var/run/postgresql is 0755 postgres:postgres, so pgbouncer can't
write there. How is this supposed to work?
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
--
Sent via pgsql-pkg-yum mailing list ([email protected])
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-pkg-yum
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: pgbouncer socket directory
2017-04-26 12:47 pgbouncer socket directory Peter Eisentraut <[email protected]>
@ 2017-04-27 10:30 ` Devrim Gündüz <[email protected]>
2017-04-27 16:00 ` Re: pgbouncer socket directory Peter Eisentraut <[email protected]>
0 siblings, 1 reply; 5+ messages in thread
From: Devrim Gündüz @ 2017-04-27 10:30 UTC (permalink / raw)
To: Peter Eisentraut <[email protected]>; pgsql-pkg-yum
Hi Peter,
On Wed, 2017-04-26 at 08:47 -0400, Peter Eisentraut wrote:
> The postgresql packages are configured with a socket directory
> /var/run/postgresql, but pgbouncer is configured with /tmp.
Hmm, I think I forgot to patch that part -- we create /var/run/pgbouncer, and
expect socket file there.
> Those should probably be the same, so that clients can connect to either
> one.
I pass -h /tmp to psql to make this work. I see your point, though.
> But /var/run/postgresql is 0755 postgres:postgres, so pgbouncer can't
> write there. How is this supposed to work?
No idea. Anyone else?
Regards,
--
Devrim Gündüz
EnterpriseDB: http://www.enterprisedb.com
PostgreSQL Danışmanı/Consultant, Red Hat Certified Engineer
Twitter: @DevrimGunduz , @DevrimGunduzTR
Attachments:
[application/pgp-signature] signature.asc (819B, 2-signature.asc)
download
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: pgbouncer socket directory
2017-04-26 12:47 pgbouncer socket directory Peter Eisentraut <[email protected]>
2017-04-27 10:30 ` Re: pgbouncer socket directory Devrim Gündüz <[email protected]>
@ 2017-04-27 16:00 ` Peter Eisentraut <[email protected]>
2017-04-28 10:59 ` Re: pgbouncer socket directory Devrim Gündüz <[email protected]>
0 siblings, 1 reply; 5+ messages in thread
From: Peter Eisentraut @ 2017-04-27 16:00 UTC (permalink / raw)
To: Devrim Gündüz <[email protected]>; pgsql-pkg-yum
On 4/27/17 06:30, Devrim Gündüz wrote:
>> But /var/run/postgresql is 0755 postgres:postgres, so pgbouncer can't
>> write there. How is this supposed to work?
>
> No idea. Anyone else?
On Debian, there is no separate pgbouncer user and it runs as "postgres".
Alternatively, add pgbouncer to the postgres group and change the
permissions to 0775.
(Or just change them to 0777 and forget the rest.)
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
--
Sent via pgsql-pkg-yum mailing list ([email protected])
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-pkg-yum
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: pgbouncer socket directory
2017-04-26 12:47 pgbouncer socket directory Peter Eisentraut <[email protected]>
2017-04-27 10:30 ` Re: pgbouncer socket directory Devrim Gündüz <[email protected]>
2017-04-27 16:00 ` Re: pgbouncer socket directory Peter Eisentraut <[email protected]>
@ 2017-04-28 10:59 ` Devrim Gündüz <[email protected]>
2017-05-01 16:28 ` Re: pgbouncer socket directory Peter Eisentraut <[email protected]>
0 siblings, 1 reply; 5+ messages in thread
From: Devrim Gündüz @ 2017-04-28 10:59 UTC (permalink / raw)
To: Peter Eisentraut <[email protected]>; pgsql-pkg-yum
Hi Peter,
On Thu, 2017-04-27 at 12:00 -0400, Peter Eisentraut wrote:
> On Debian, there is no separate pgbouncer user and it runs as "postgres".
If my memory serves well, there was a community request about switching from
postgres to pgbouncer user in the past, and that was the reason why we switched
to that one.
> Alternatively, add pgbouncer to the postgres group and change the
> permissions to 0775.
>
> (Or just change them to 0777 and forget the rest.)
Will 0777 be secure?
Regards,
--
Devrim Gündüz
EnterpriseDB: http://www.enterprisedb.com
PostgreSQL Danışmanı/Consultant, Red Hat Certified Engineer
Twitter: @DevrimGunduz , @DevrimGunduzTR
Attachments:
[application/pgp-signature] signature.asc (819B, 2-signature.asc)
download
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: pgbouncer socket directory
2017-04-26 12:47 pgbouncer socket directory Peter Eisentraut <[email protected]>
2017-04-27 10:30 ` Re: pgbouncer socket directory Devrim Gündüz <[email protected]>
2017-04-27 16:00 ` Re: pgbouncer socket directory Peter Eisentraut <[email protected]>
2017-04-28 10:59 ` Re: pgbouncer socket directory Devrim Gündüz <[email protected]>
@ 2017-05-01 16:28 ` Peter Eisentraut <[email protected]>
0 siblings, 0 replies; 5+ messages in thread
From: Peter Eisentraut @ 2017-05-01 16:28 UTC (permalink / raw)
To: Devrim Gündüz <[email protected]>; pgsql-pkg-yum
On 4/28/17 06:59, Devrim Gündüz wrote:
>> Alternatively, add pgbouncer to the postgres group and change the
>> permissions to 0775.
>>
>> (Or just change them to 0777 and forget the rest.)
>
> Will 0777 be secure?
That depends on what the security requirements are here.
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
--
Sent via pgsql-pkg-yum mailing list ([email protected])
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-pkg-yum
^ permalink raw reply [nested|flat] 5+ messages in thread
end of thread, other threads:[~2017-05-01 16:28 UTC | newest]
Thread overview: 5+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2017-04-26 12:47 pgbouncer socket directory Peter Eisentraut <[email protected]>
2017-04-27 10:30 ` Devrim Gündüz <[email protected]>
2017-04-27 16:00 ` Peter Eisentraut <[email protected]>
2017-04-28 10:59 ` Devrim Gündüz <[email protected]>
2017-05-01 16:28 ` Peter Eisentraut <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox