Re: Using PG with Windows EFS or TrueCrypt for encryption

From: Brady Mathis <bmathis(at)r-hsoftware(dot)com>
To: "Massa, Harald Armin" <chef(at)ghum(dot)de>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Using PG with Windows EFS or TrueCrypt for encryption
Date: 2010-12-09 18:54:37
Message-ID: AANLkTi=oBHz_U2X22SJJWWki6oA=J1MZAk2jp3d9vzvc@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hey Harald -

The permissions! Of course! Thanks, you fixed me.

Brady

On Wed, Dec 8, 2010 at 6:18 AM, Massa, Harald Armin <chef(at)ghum(dot)de> wrote:

> Brady,
>
> Then I attempted to mount a normal encrypted volume with TrueCrypt, move
>> the data\ and sub-folders to this volume and reconfigure PG to point to this
>> as the data folder. Now, the PG service will not start at all.
>>
>> moving data and subfolder on NTFS is a Level-20 operation. The usual cases
> for PostgreSQL-Service not starting ar:
>
> a) user account has wrong privileges
> b) user account has lost "Logon as Service"
> c) password of user account was changed / invalidate by some system policy
> / administrator
> d) user account which the PostgreSQL service logs on with is not able to
> acces the data-directories. d) is usually anaylizable via the system
> eventviewer.
>
> Most likely cause during your copy operation: the permission on the
> directories where changed. OR: the link to the Data-directory (part of the
> service-configuration) within services.msc is no longer valid (as in: data
> in different place)
>
> I can confirm that is possible to have a database on a TrueCrypt encrypted
> volume. It is dog slow. My impression is that data from that encypted volume
> is not really cached.
>
> Harald
>
>
>
>> Has anyone implemented something like this for PG in Windows?
>>
>> Thanks!
>> Brady
>>
>> --
>> Brady Mathis | bmathis(at)r-hsoftware(dot)com | 877.696.6547 ext 102
>>
>
>
>
> --
> GHUM GmbH
> Harald Armin Massa
> Spielberger Straße 49
> 70435 Stuttgart
> 0173/9409607
>
> Amtsgericht Stuttgart, HRB 734971
> -
> persuadere.
> et programmare
>

--
Brady Mathis | bmathis(at)r-hsoftware(dot)com | 877.696.6547 ext 102

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Josh Kupershmidt 2010-12-09 19:30:09 monitoring warm standby lag in 8.4?
Previous Message Dmitriy Igrishin 2010-12-09 18:24:21 Extended query protocol and exact types matches.