Re: Best way to "mask" password in DBLINK

From: "Ow Mun Heng" <ow(dot)mun(dot)heng(at)wdc(dot)com>
To: "Magnus Hagander" <magnus(at)hagander(dot)net>
Cc: "Tommy Gildseth" <tommy(dot)gildseth(at)usit(dot)uio(dot)no>, <pgsql-general(at)postgresql(dot)org>
Subject: Re: Best way to "mask" password in DBLINK
Date: 2009-08-12 08:01:16
Message-ID: D1109E8B2FB53A45BDB60F8145905CE9033B8385@wdmyexbe03.my.asia.wdc.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

-----Original Message-----
From: Magnus Hagander [mailto:magnus(at)hagander(dot)net]
On Wed, Aug 12, 2009 at 09:30, Ow Mun Heng<ow(dot)mun(dot)heng(at)wdc(dot)com> wrote:
>>
>> From: Tommy Gildseth [mailto:tommy(dot)gildseth(at)usit(dot)uio(dot)no]
>>
>> Ow Mun Heng wrote:
>>>> I'm starting to use DBLink / DBI-Link and one of the "bad" things is
>>>that
>>>> the password is out in the clear.
>>>> What can I do to prevent it from being such? How do I protect it from
>>>> 'innocent' users?
>>
>>>If I'm not mistaken, it's possible to put your password in the .pgpass
>>>file in the postgres-users home folder, on the server where the postgres
>>>cluster is running.
>>
>> Isn't that how one connects using the CLI? Eg: via psql?

>You need to put it in the .pgpass file of the postgres user - the one
>that runs the server. .pgpass is dealt with by libpq, and DBLink and
>DBI-Link both use libpq to connect to the remote server.

The View is owned by the user "operator" not postgres
Does it make a difference?

My understanding of your words are that it _does_ make a difference and If I
put it into the .pgpass of the postgres user then all is fine.

Thanks for confirmation

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Magnus Hagander 2009-08-12 08:08:48 Re: Best way to "mask" password in DBLINK
Previous Message Richard Huxton 2009-08-12 08:01:11 Re: NOTICE: there is no transaction in progress