From: | Mathieu Arnold <arn_mat(at)club-internet(dot)fr> |
---|---|
To: | julien piaser <jpiaser(at)lxsolutions(dot)com> |
Cc: | pgsql-admin(at)postgresql(dot)org |
Subject: | Re: user password problem |
Date: | 2000-07-27 08:23:24 |
Message-ID: | 397FF17C.4C7114E0@club-internet.fr |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
julien piaser wrote:
>
> I'm using postgresql7.0.2 on Linux Redhat 6.1.
>
> It seems that any user can log in psql with any other user account
> without giving any password
>
> i.e: if I'm logged in a shell as julien (who is a single user, not an
> administrator) I just have to write: psql -U postgres mydatabase to go
> into mydatabase with postgres permissions, without giving any password
> (or a wrong one as well)
>
> Not really securised... any suggestions?
look at your $PG_DATA/pg_hba.conf
instead of :
local all trust
host all 127.0.0.1 255.255.255.255 trust
try something like :
local all crypt
host all 127.0.0.1 255.255.255.255 crypt
--
Mathieu Arnold
From | Date | Subject | |
---|---|---|---|
Next Message | Wuttipong Suvaphrom | 2000-07-27 10:21:00 | password |
Previous Message | julien piaser | 2000-07-27 08:04:15 | user password problem |