Re: Getting a DB password to work without editing pg_hba.conf, - Mailing list pgsql-general

From Madison Kelly
Subject Re: Getting a DB password to work without editing pg_hba.conf,
Date
Msg-id 43A31100.7020903@alteeve.com
Whole thread Raw
In response to Re: Getting a DB password to work without editing pg_hba.conf, possible?  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: Getting a DB password to work without editing pg_hba.conf,
Re: Getting a DB password to work without editing pg_hba.conf,
List pgsql-general
Tom Lane wrote:
> Madison Kelly <linux@alteeve.com> writes:
>
>>  I want to find a way to let the user set the password on the new
>>database and have postgres actually ask for it without editing the
>>default 'pg_hba.conf' file, if at all possible.
>
>
> There is no such animal as a "database password" in PG.  There are user
> passwords.  You can grant or deny a user access to a database altogether,
> but you can't predicate it on him supplying a password different from
> his (single) login password.
>
>             regards, tom lane

Thanks for the reply!

May I ask then? What *is* considered "best practices" for securing a
database in PostgreSQL? Assuming I leave the 'pg_hba.conf' file at it's
default values, is there any real point to having a password on a
postgresql user account? I've been reading the docs but I guess I am
overthinking the problem or missing something obvious. :p

Madison

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
           Madison Kelly (Digimer)
    TLE-BU; The Linux Experience, Back Up
Main Project Page:  http://tle-bu.org
Community Forum:    http://forum.tle-bu.org
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

pgsql-general by date:

Previous
From: Tom Lane
Date:
Subject: Re: Getting a DB password to work without editing pg_hba.conf, possible?
Next
From: "Florian G. Pflug"
Date:
Subject: Re: Toolkit for creating editable grid