Re: Bypassing authentication - Mailing list pgsql-novice

From Andre Majorel
Subject Re: Bypassing authentication
Date
Msg-id 20100710125126.GC2132@aym.net2.nerim.net
Whole thread Raw
In response to Re: Bypassing authentication  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-novice
On 2010-07-08 16:42 -0400, Tom Lane wrote:
> Andre Majorel <aym-2lqsgp@teaser.fr> writes:
> > Is there a way to have psql bypass authentication as joe if the
> > system user running psql is postgres, the way su doesn't ask for
> > password if you are root ?
>
> Not per se, but you could set up an ident map that says postgres
> is allowed to log in as joe (and anybody else he needs to log in as).
>
> I think 9.0 will have some wildcard ability in ident maps, which'd
> save you from having to list a lot of roles in the map; but IIRC
> there is none in existing releases.

Mmm... In an installation procedure, the less mucking about with
pg_hba.conf, the better.

A method that seems to work for me is to authenticate as a
superuser and *then* become joe with SET ROLE :

  $ sudo -u postgres psql -At -c "SET ROLE 'joe'; SHOW IS_SUPERUSER;"
  off

Thank you.

--
André Majorel http://www.teaser.fr/~amajorel/

pgsql-novice by date:

Previous
From: Mladen Gogala
Date:
Subject: Re: SQL from Linux command line
Next
From: Frank Bax
Date:
Subject: Re: SQL from Linux command line