Re: tracking down breakins?

"Johnson, Shaunn" <SJohnson6(at)bcbsm(dot)com> writes:
> A similar question to what David Siebert was
> asking - I am trying to locate users that are trying
> to log in as someone else in PostgreSQL.

Again, I think log_connections is what you're looking for.

Note that a failed connection attempt is *not* necessarily a sign of
evil intent. For example, I believe that psql does not prompt the
user for a password unless its initial attempt to connect is rejected
by the server with a "password required" error. So you will see a
failed attempt and then a (hopefully) successful attempt a few seconds
later, whenever you are using password authentication.

regards, tom lane