Re: Disable TRUST authentication mode - Mailing list pgsql-admin

From Frank Lanitz
Subject Re: Disable TRUST authentication mode
Date
Msg-id 20120310161907.aa9549a7ed9ac0b0700b97c4@frank.uvena.de
Whole thread Raw
In response to Re: Disable TRUST authentication mode  (c k <shreeseva.learning@gmail.com>)
List pgsql-admin
On Sat, 10 Mar 2012 20:45:38 +0530
c k <shreeseva.learning@gmail.com> wrote:

> I am not managing the customer database. The problem is related with
> the IT department of the customer who has the access to the database
> server and the fraud persons from this department can chnage the
> authentication to trust to get the access to database without knowing
> the passwords and even to superuser accounts.

This most likely sounds like a social problem you _cannot_ solve with
technique. However, ensure users you don't trust are not allowed to
write pg_hba.conf e.g. by don't giving root/postgres-user rights on
that machine.

Cheers,
Frank
--
Frank Lanitz <frank@frank.uvena.de>

Attachment

pgsql-admin by date:

Previous
From: Jan Lentfer
Date:
Subject: Re: Disable TRUST authentication mode
Next
From: c k
Date:
Subject: Re: Disable TRUST authentication mode