Re: Password for postgresql superuser?

----- Original Message -----
From: "Chris Browne" <cbbrowne(at)acm(dot)org>
To: pgsql-general(at)postgresql(dot)org
Sent: Thursday, June 08, 2006 01:30 PM
Subject: [GENERAL] Password for postgresql superuser?

> jqpx37(at)iprive(dot)com ("jqpx37") writes:
>
> > Is there any security risk in the postgresql superuser having a
> > password?
> >
> > I installed a Linux distro recently and had it install Postgresql.
> > It automatically set up the postgres account; the account was set up
> > with no password.
> >
> > I could of course create a password, but it's not clear to me that's
> > a good thing from a security standpoint.
>
> That depends on your security policies.
>
> There's a pretty good argument to be made that a 'postgres' account
> should only permit people in via "su -", in which case it might not
> need to have an individual password...

Thanks for your response.

I found allusions to the point your making, though no detailed explanation. It makes sense even without a thorough explication.

Best wishes

> --
> (format nil "~S(at)~S" "cbbrowne" "cbbrowne.com")
> http://www3.sympatico.ca/cbbrowne/oses.html
> "If you give someone Fortran, he has Fortran.
> If you give someone Lisp, he has any language he pleases."
> -- Guy L. Steele Jr.
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: Have you checked our extensive FAQ?
>
> http://www.postgresql.org/docs/faq
>From pgsql-general-owner(at)postgresql(dot)org Tue Jun 13 10:39:59 2006
X-Original-To: pgsql-general-postgresql(dot)org(at)postgresql(dot)org
Received: from localhost (mx1.hub.org [200.46.208.251])
by postgresql.org (Postfix) with ESMTP id 03F309FA5BE
for <pgsql-general-postgresql(dot)org(at)postgresql(dot)org>; Tue, 13 Jun 2006 10:39:59 -0300 (ADT)
Received: from postgresql.org ([200.46.204.71])
by localhost (mx1.hub.org [200.46.208.251]) (amavisd-new, port 10024)
with ESMTP id 78464-04 for <pgsql-general-postgresql(dot)org(at)postgresql(dot)org>;
Tue, 13 Jun 2006 10:39:55 -0300 (ADT)
X-Greylist: from auto-whitelisted by SQLgrey-
Received: from iprive.iconicnetworks.com (c2.3c.5d45.static.theplanet.com [69.93.60.194])
by postgresql.org (Postfix) with ESMTP id 9D2609FA12F
for <pgsql-general(at)postgresql(dot)org>; Tue, 13 Jun 2006 10:39:55 -0300 (ADT)
Received: by iprive.iconicnetworks.com (Postfix, from userid 48)
id 56CF5640027; Tue, 13 Jun 2006 07:39:54 -0600 (MDT)
To: pgsql-general(at)postgresql(dot)org
Subject: PostgreSQL and Apache
Reply-To: <jqpx37(at)iprive(dot)com>
From: "jqpx37" <jqpx37(at)iprive(dot)com>
MIME-Version: 1.0
X-Mailer: HiveMail 1.2.1
Date: Tue, 13 Jun 2006 07:39:54 -0600
X-Priority: 3
Message-Id: <20060613133954(dot)56CF5640027(at)iprive(dot)iconicnetworks(dot)com>
X-Virus-Scanned: Maia Mailguard 1.0.1
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Archive-Number: 200606/508
X-Sequence-Number: 96880

I'm working on a project involving PostgreSQL and Apache.

Anyone know of any good books or online how-to's on getting PostgreSQL and Apache to work together? (I'm also using PHP.)

TIA
>From pgsql-general-owner(at)postgresql(dot)org Tue Jun 13 10:45:52 2006
X-Original-To: pgsql-general-postgresql(dot)org(at)postgresql(dot)org
Received: from localhost (mx1.hub.org [200.46.208.251])
by postgresql.org (Postfix) with ESMTP id 7220C9FA5BE
for <pgsql-general-postgresql(dot)org(at)postgresql(dot)org>; Tue, 13 Jun 2006 10:45:52 -0300 (ADT)
Received: from postgresql.org ([200.46.204.71])
by localhost (mx1.hub.org [200.46.208.251]) (amavisd-new, port 10024)
with ESMTP id 78716-09 for <pgsql-general-postgresql(dot)org(at)postgresql(dot)org>;
Tue, 13 Jun 2006 10:45:44 -0300 (ADT)
X-Greylist: domain auto-whitelisted by SQLgrey-
Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.178])
by postgresql.org (Postfix) with ESMTP id E9E829FA12F
for <pgsql-general(at)postgresql(dot)org>; Tue, 13 Jun 2006 10:45:43 -0300 (ADT)
Received: by py-out-1112.google.com with SMTP id b29so1768662pya
for <pgsql-general(at)postgresql(dot)org>; Tue, 13 Jun 2006 06:45:41 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=beta; d=gmail.com;
h=received:message-id:date:from:to:subject:mime-version:content-type;
b=TkC5brEBeY8/lCg9ZsYqBA/v/alji7KQsl4o8P1OdXwqEbsKuDVzbwkWTf3AUpDfVa1Q2ZfsNKNQSO9bzJIeUizznih44gTN3/aSJfzugkgbzlwg5+29PGPjZOAwIrDq5Rls4vsIkFZq0AoLFrhZF2EDmlBpm8c4ZPt8xKo2dMA=
Received: by 10.35.89.10 with SMTP id r10mr2844722pyl;
Tue, 13 Jun 2006 06:45:40 -0700 (PDT)
Received: by 10.35.117.13 with HTTP; Tue, 13 Jun 2006 06:45:40 -0700 (PDT)
Message-ID: <7e444d3e0606130645k47d66579kfeaf276130012731(at)mail(dot)gmail(dot)com>
Date: Tue, 13 Jun 2006 16:45:40 +0300
From: "andrey dmitrenko" <jan2ary(at)gmail(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: Cant' create language - "could not load library"
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_13294_2118864.1150206340725"
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Archive-Number: 200606/509
X-Sequence-Number: 96881

------=_Part_13294_2118864.1150206340725
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello All.

I have installed version 8.1.4 (located in D:/PostgreSQL/8.1 ) on Windows XP
and try to create language with command CREATE LANGUAGE or createlang
command line tool but in any way got an error:

postgres=# create language plperl;
ERROR: could not load library "D:/PostgreSQL/8.1/lib/plperl.dll": The
specified module could not be found.

and the same for any language except of plpgsql.
Also I have tried to create language java from command line:

java org.postgresql.pljava.deploy.Deployer -install

but got the same error.
All of the dll-libraries are exist
in dynamic_library_path, and on their places.
I've read thread
http://archives.postgresql.org/pgsql-bugs/2006-03/msg00039.php and some
referenced but got nothing.

Is this real bug or it's possible to resolve it and how?

Thanks.

------=_Part_13294_2118864.1150206340725
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello All.<br><br>I have installed version 8.1.4&nbsp;(located in D:/PostgreSQL/8.1 ) on Windows XP and try to create language with command CREATE LANGUAGE or createlang command line tool but in any way got an error:<br><br>postgres=# create language plperl;
<br>ERROR: could not load library &quot;D:/PostgreSQL/8.1/lib/plperl.dll&quot;: The specified module could not be found.<br><br>and the same for any language except of plpgsql.<br>Also I have tried to create language java from command line:
<br><br>java org.postgresql.pljava.deploy.Deployer -install<br><br>but got the same error.<br>All of the dll-libraries are exist in&nbsp;dynamic_library_path,&nbsp;and&nbsp;on&nbsp;their&nbsp;places.&nbsp;<br> I've read thread <a href="http://archives.postgresql.org/pgsql-bugs/2006-03/msg00039.php">
http://archives.postgresql.org/pgsql-bugs/2006-03/msg00039.php</a> and some referenced but got nothing.<br><br>Is this real bug or it's possible to resolve it&nbsp;and&nbsp;how?<br> <br>Thanks.<br>

------=_Part_13294_2118864.1150206340725--