From: | Stephan Szabo <sszabo(at)megazone(dot)bigpanda(dot)com> |
---|---|
To: | Dan Bikle <dan(dot)bikle(at)gmail(dot)com> |
Cc: | pgsql-admin(at)postgresql(dot)org |
Subject: | Re: [pgsql-admin] Simple question about security in 8.1.1 |
Date: | 2006-01-23 02:35:06 |
Message-ID: | 20060122183141.G82325@megazone.bigpanda.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
On Sun, 22 Jan 2006, Dan Bikle wrote:
> I'm allowed to connect to the db10 database without authentication!:
>
> bash-2.05b$ psql db10 scott
> Welcome to psql 8.1.1, the PostgreSQL interactive terminal.
>
> Type: copyright for distribution terms
> h for help with SQL commands
> ? for help with psql commands
> g or terminate with semicolon to execute query
> q to quit
>
> db10=> create table dropme (n integer);
> CREATE TABLE
> db10=> drop table dropme;
> DROP TABLE
> db10=>
>
> This seems insecure.
>
> How do I create a postgreSQL user account such that attempts to connect
> to it require authentication?
You probably should look at the following:
http://www.postgresql.org/docs/8.1/interactive/client-authentication.html
From | Date | Subject | |
---|---|---|---|
Next Message | Joshua D. Drake | 2006-01-23 04:28:49 | Re: [pgsql-admin] Simple question about security in 8.1.1 |
Previous Message | Dan Bikle | 2006-01-23 02:02:50 | [pgsql-admin] Simple question about security in 8.1.1 |