Re: Running PostGre on DVD - Mailing list pgsql-hackers

From Andreas Joseph Krogh
Subject Re: Running PostGre on DVD
Date
Msg-id 200511151439.53702.andreak@officenet.no
Whole thread Raw
In response to Re: Running PostGre on DVD  (Martijn van Oosterhout <kleptog@svana.org>)
List pgsql-hackers
On Tuesday 15 November 2005 02:07 pm, Martijn van Oosterhout wrote:
> On Tue, Nov 15, 2005 at 01:51:04PM +0100, Magnus Hagander wrote:
> > Huh. The stated problem is that the low privilege account does *not*
> > have the required privilege (to log in).
> > Note that PostgreSQL doesn't really require "log on locally" for
> > anything other than initdb. So if you can initdb on a different box and
> > copy it there, or somehow get the permissions temporarily, the server
> > will workf ine. The server only requires "Log in as a service".
>
> Sorry, my understanding of Windows permissions is hazy at times. You
> have permission to create users, but not permission to run programs as
> the user you created (because you need to "login"). And there is a
> distinction between running as a service and running as a program(?!).
>
> So I think my statement is correct that the above user cannot run
> programs as anything other than administrator privelidges. Like you
> said, if he could, this discussion would be moot.
>
> > If the security is set up so that you can use a local *admin* acconut
> > but not a local *nonadmin* accuont, then your domain people really need
> > to look over their security policies, because they are very very broken
> > indeed.
>
> That was the way I read it and I agree, that's a very broken way to set
> things up.
>
> Have a nice day,

Broken or not, it's a setup I'm not in control over. And I'm certainly not the
guy to hack the "disable admin-security-check on windows" feature:-(

--
Andreas Joseph Krogh <andreak@officenet.no>
Senior Software Developer / Manager
gpg public_key: http://dev.officenet.no/~andreak/public_key.asc
------------------------+---------------------------------------------+
OfficeNet AS            | The most difficult thing in the world is to |
Hoffsveien 17           | know how to do a thing and to watch         |
PO. Box 425 Skøyen      | somebody else doing it wrong, without       |
0213 Oslo               | comment.                                    |
NORWAY                  |                                             |
Phone : +47 22 13 01 00 |                                             |
Direct: +47 22 13 10 03 |                                             |
Mobile: +47 909  56 963 |                                             |
------------------------+---------------------------------------------+


pgsql-hackers by date:

Previous
From: "Magnus Hagander"
Date:
Subject: Re: Running PostGre on DVD
Next
From: Andreas Joseph Krogh
Date:
Subject: Re: Running PostGre on DVD