tracking down breakins?

From: "Johnson, Shaunn" <SJohnson6(at)bcbsm(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: tracking down breakins?
Date: 2003-01-08 16:10:18
Message-ID: 73309C2FDD95D11192E60008C7B1D5BB04C74488@snt452.corp.bcbsm.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Running PostgreSQL 7.2.1 on RedHat Linux 7.2

A similar question to what David Siebert was
asking - I am trying to locate users that are trying
to log in as someone else in PostgreSQL.

I have the postmaster running the debug with level 2
and when I review my logs, I see this:

[snip from logs]

Jan 6 09:11:46 test_srv postgres[30134]: [228919] FATAL 1: Password
authentication failed for user "Admin"

[/snip from logs]

How can I trace back *who* is trying to log in as 'Admin' and how
can I stop it? If I run debug on any higher level, the response is
much slower; perhaps there is another way?

Thanks!

-X

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Johnson, Shaunn 2003-01-08 16:24:57 too many Fatal Error 1: shutdown messages
Previous Message Stephan Szabo 2003-01-08 16:07:30 Re: Drop foreign keys