Re: pgAdmin4 4.8 Kubuntu issues

From: Dave Page <dpage(at)pgadmin(dot)org>
To: richard coleman <rcoleman(dot)ascentgl(at)gmail(dot)com>, "pgadmin-support lists(dot)postgresql(dot)org" <pgadmin-support(at)lists(dot)postgresql(dot)org>
Subject: Re: pgAdmin4 4.8 Kubuntu issues
Date: 2019-06-05 14:59:22
Message-ID: CA+OCxowPg+SBTA97yKwga3Gfq7RK24LOtPQMkjqxEK_RP_XTPQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgadmin-support

Richard,

On Wed, Jun 5, 2019 at 3:22 PM richard coleman <rcoleman(dot)ascentgl(at)gmail(dot)com>
wrote:

> Dave,
>
> And where would *that* be? pgAdmin4 the executable and the shared
> library is located in /usr/bin/. There are *no* entries in /etc/ for
> pgAdmin4. There is a pgadmin4.db in /home/u/.pgadmin/ but *no* config
> files of any kind there either.
>

I have no idea, I don't use Ubuntu or any of it's derivatives and don't
know where it installs. Have you tried searching for config.py? That is
*not* optional, and must exist.

> So it's looking like the only way to actually *use *the current version
> of pgAdmin4 is to create an undocumented file (the help page says you can
> use config.py as a reference, but guess what? That file doesn't exist
> either.) in an unknown location, and manually add the magic string;
>
> "*MASTER_PASSWORD_REQUIRED=False"*
>
>
I think that's a little hyperbolic don't you? It works as intended, with no
changes required if you set the password and re-enter it when you restart
pgAdmin. You only need to modify anything if you want to change the
behaviour.

And to be clear; if config.py is not present on your system, then there is
no way pgAdmin will even start, let alone work.

>
> I get *why* you added this feature, but I think it was implemented *completely
> backwards*. Instead of making *every* end user jump through these
> ridiculous hoops just to *continue* to use pgAdmin4 as they had been up
> to this point, a better option would be to allow security conscious sys
> admins to add the configuration:
>
> "*MASTER_PASSWORD_REQUIRED=True"*
>
> to a non-user writable configuration file. In that way the vast majority
> of people running pgAdmin4 can continue to do so and the few that
> wanted/needed the added security could do so as well.
>

That is not how security works. Without the master password feature, there
are possible attack vectors in which a stored password could be accessed by
third parties. We aim for secure by default; if you don't care about the
risk, then you can actively choose to run in a less secure way.

>
>
> So, now I'm using dBeaver as I *can't* disable the Master Password dialog
> box and pgAdmin4 won't let me *do* anything.
>
> Any other thoughts? Anyone?
>
> Thanks,
>
> rik.
>
> On Wed, Jun 5, 2019 at 10:03 AM Dave Page <dpage(at)pgadmin(dot)org> wrote:
>
>>
>>
>> On Wed, Jun 5, 2019 at 2:44 PM richard coleman <
>> rcoleman(dot)ascentgl(at)gmail(dot)com> wrote:
>>
>>> Dave,
>>>
>>> Sorry, but after an e*xhaustive* search of the several terabytes on my
>>> machine, there is *no* config_local.py file. Do you have any idea
>>> where it's supposed to be located?
>>>
>>
>> You need to create it if it doesn't exist, in the same directory as
>> pgAdmin's config.py.
>>
>>
>>>
>>> Thanks,
>>>
>>> rik.
>>>
>>> On Wed, Jun 5, 2019 at 9:30 AM Dave Page <dpage(at)pgadmin(dot)org> wrote:
>>>
>>>>
>>>>
>>>> On Wed, Jun 5, 2019 at 1:16 PM richard coleman <
>>>> rcoleman(dot)ascentgl(at)gmail(dot)com> wrote:
>>>>
>>>>> Cherio,
>>>>>
>>>>> I am sorry to inform you, but there is *no* mention of "config_local.py"
>>>>> on that page, nor any indication of where I would find it.
>>>>>
>>>>
>>>>
>>>> https://www.pgadmin.org/docs/pgadmin4/4.x/desktop_deployment.html#configuration
>>>>
>>>>
>>>>>
>>>>> rik.
>>>>>
>>>>> On Tue, Jun 4, 2019 at 5:06 PM Cherio <cherio(at)gmail(dot)com> wrote:
>>>>>
>>>>>> Put "MASTER_PASSWORD_REQUIRED = False" line into your
>>>>>> "lib/python?.?/site-packages/pgadmin4/config_local.py". This is in the
>>>>>> docs: https://www.pgadmin.org/docs/pgadmin4/dev/master_password.html
>>>>>>
>>>>>> On Tue, Jun 4, 2019 at 4:41 PM richard coleman <
>>>>>> rcoleman(dot)ascentgl(at)gmail(dot)com> wrote:
>>>>>>
>>>>>>> To whomever,
>>>>>>>
>>>>>>> Running a newly update pgAdmin 4 version 4.8 on my Kubuntu box.
>>>>>>> There are a couple of glaring issues.
>>>>>>>
>>>>>>> First: It keeps prompting to; "Set Master Password"
>>>>>>> I don't want to set another password that I'll just end up
>>>>>>> forgetting.
>>>>>>>
>>>>>>> Second: When I click the "?" button on that dialog box it takes me
>>>>>>> to this page:
>>>>>>> "http://127.0.0.1:33681/help/help/master_password.html"
>>>>>>> Which returns "404 Not Found"
>>>>>>>
>>>>>>> Hopefully there is a simple solution to these issues.
>>>>>>>
>>>>>>> Thanks,
>>>>>>>
>>>>>>> rik.
>>>>>>>
>>>>>>
>>>>
>>>> --
>>>> Dave Page
>>>> Blog: http://pgsnake.blogspot.com
>>>> Twitter: @pgsnake
>>>>
>>>> EnterpriseDB UK: http://www.enterprisedb.com
>>>> The Enterprise PostgreSQL Company
>>>>
>>>
>>
>> --
>> Dave Page
>> Blog: http://pgsnake.blogspot.com
>> Twitter: @pgsnake
>>
>> EnterpriseDB UK: http://www.enterprisedb.com
>> The Enterprise PostgreSQL Company
>>
>

--
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake

EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

In response to

Responses

Browse pgadmin-support by date

  From Date Subject
Next Message richard coleman 2019-06-05 15:55:09 Re: pgAdmin4 4.8 Kubuntu issues
Previous Message Dave Page 2019-06-05 14:50:34 Re: [EXTERNAL] - Re: pgAdmin IV