Re: [pgsql-admin] Simple question about security in 8.1.1

From: Stephan Szabo <sszabo(at)megazone(dot)bigpanda(dot)com>
To: Dan Bikle <dan(dot)bikle(at)gmail(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: [pgsql-admin] Simple question about security in 8.1.1
Date: 2006-01-23 02:35:06
Message-ID: 20060122183141.G82325@megazone.bigpanda.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Sun, 22 Jan 2006, Dan Bikle wrote:

> I'm allowed to connect to the db10 database without authentication!:
>
> bash-2.05b$ psql db10 scott
> Welcome to psql 8.1.1, the PostgreSQL interactive terminal.
>
> Type: copyright for distribution terms
> h for help with SQL commands
> ? for help with psql commands
> g or terminate with semicolon to execute query
> q to quit
>
> db10=> create table dropme (n integer);
> CREATE TABLE
> db10=> drop table dropme;
> DROP TABLE
> db10=>
>
> This seems insecure.
>
> How do I create a postgreSQL user account such that attempts to connect
> to it require authentication?

You probably should look at the following:

http://www.postgresql.org/docs/8.1/interactive/client-authentication.html

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Joshua D. Drake 2006-01-23 04:28:49 Re: [pgsql-admin] Simple question about security in 8.1.1
Previous Message Dan Bikle 2006-01-23 02:02:50 [pgsql-admin] Simple question about security in 8.1.1