Re: superuser_reserved_connections and max_connections

From: John Scalia <jayknowsunix(at)gmail(dot)com>
To: Travis Kirstine <tkirstine(at)firstbasesolutions(dot)com>
Cc: "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org>
Subject: Re: superuser_reserved_connections and max_connections
Date: 2016-06-24 16:27:09
Message-ID: CABzCKRAQki38+LhPW-EkuUPbAajgsZ5G26XGB4QWBKHnjHXiUw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Ummm.... YES, there are great (potential) differences between non-Superuser
and Superuser connections and their abilities. Apparently when your users
were created, someone added superuser abilities to each one. That is almost
certainly an error. You may have users which should have read-only ability
others who should have read-write, and far fewer with superuser. Check the
web pages for GRANTS as to what each user can have. If you have lots of
users and don't want to assign each individually, then make a group role,
give it the abilities you want, then assign your appropriate users to that
group. Sounds like you need to read up on database security.
--
Jay

On Fri, Jun 24, 2016 at 11:10 AM, Travis Kirstine <
tkirstine(at)firstbasesolutions(dot)com> wrote:

>
> We were getting a lot of "max connections reached" errors and noticed that
> all our users are super users, after some digging I found the
>
> superuser_reserved_connections parameter was not set (default to 3) this
> lead to some additional questions:
>
>
> If all my users are superusers are they effectively limited to the number
> of connections defined in the
>
> superuser_reserved_connections parameter?
>
>
> Is there any significant difference between a superuser and non-superuser
> connection?
>
>
> Any additional insight would be great.
>

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Steve Crawford 2016-06-24 16:40:08 Re: superuser_reserved_connections and max_connections
Previous Message David G. Johnston 2016-06-24 16:26:10 Re: superuser_reserved_connections and max_connections