Re: Seeking the correct term of art for the (unique) role that is usually called "postgres"—and the mental model that underlies it all

From: Bryn Llewellyn <bryn(at)yugabyte(dot)com>
To: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>
Cc: Jeremy Smith <jeremy(at)musicsmith(dot)net>, Ian Lawrence Barwick <barwick(at)gmail(dot)com>, pgsql-general list <pgsql-general(at)lists(dot)postgresql(dot)org>, Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
Subject: Re: Seeking the correct term of art for the (unique) role that is usually called "postgres"—and the mental model that underlies it all
Date: 2022-10-28 00:24:34
Message-ID: 1E27E0F0-28A9-4890-9EB0-642843CA4C29@yugabyte.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

> david(dot)g(dot)johnston(at)gmail(dot)com wrote:
>
>> bryn(at)yugabyte(dot)com wrote:
>>
>> «
>> You can start a session without specifying the name of the cluster role as which to authorize, its password, and the name of the database to which to connect, ONLY when these things are true:
>>
>> 1. The within-cluster catalog-owning role has a certain name, say "pg_system" (or "bob").
>>
>> 2. The O/S user that owns (most of) the O/S presence of the cluster and the software that accesses it has the identical name "pg_system" (or "bob").
>>
>> 3. The current O/S user when you make the attempt to connect is "pg_system" (or "bob").
>> »
>>
>> I want to know if my hypothesis is correct.
>
> It is not. "By default" probably, but not "only". Peer authentication means:
>
> If the local O/S user (bob) running "psql" requests to login to the database using that same* role name (bob) and the role exists in the cluster, accept the authentication attempt.
>
> * You can implement aliases by using an identity mapping.
>
> Nothing more, nothing less.
>
>> And, more importantly, I want to know where I can read a nicely written linear account of what *is* correct tha defines and then uses the official terms of art.
>
> It doesn't exist, deal with it. Most people just call the "bootstrap" role "postgres" when not talking about a specific installed cluster that happens to use something different. In any case, no matter what terminology is used everyone seems to figure out what is being referred to from context at least and largely don't make a big deal about it. Unless you actually want to write the documentation just pick something you like and go with it.

Yes, all is clear now. Thanks again. And thanks for the dispensation to choose my term of art. I'll use "catalog-owning role" from now on.

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Bryn Llewellyn 2022-10-28 00:28:45 Re: Seeking the correct term of art for the (unique) role that is usually called "postgres"—and the mental model that underlies it all
Previous Message Zheng Li 2022-10-28 00:20:42 Re: Support logical replication of DDLs