Re: pg_hba.conf alternative - Mailing list pgsql-hackers

From Q Beukes
Subject Re: pg_hba.conf alternative
Date
Msg-id 43EBE4A7.508@list.za.net
Whole thread Raw
In response to Re: pg_hba.conf alternative  (korry <korry@starband.net>)
Responses Re: pg_hba.conf alternative
List pgsql-hackers
I did consider that, but the software we use (which again uses postgresql)
atm only supports local connection to the database.

I am the database admin, the other admins just manage stuff like user
accounts,
checking logs, etc...

Unfortunately there is no other way to set it up, and like I mentioned
government security is not required.

I did however statically code the pg_hba.conf file into pg binaries.

The only way I found to access the db now would be to replace the binary
and
possibly sniffing traffic. But we're not worried about that. They not really
criminally minded people.

thx for everyones help anyway ;>


korry wrote:

>>Why would you not simply set this up on a seperate machine to which only
>>the trusted admins had access? Most data centers I am familiar with use
>>single purpose machines anyway. If someone is trusted as root on your
>>box they can screw you no matter what you do. Pretending otherwise is
>>just folly.
>>    
>>
>
>Agreed - that would be a much better (easier and more secure) solution where 
>practical.
>
>            -- Korry
>
>---------------------------(end of broadcast)---------------------------
>TIP 3: Have you checked our extensive FAQ?
>
>               http://www.postgresql.org/docs/faq
>
>  
>



pgsql-hackers by date:

Previous
From: Simon Riggs
Date:
Subject: Scrollable cursors and Sort performance
Next
From: Andrew Dunstan
Date:
Subject: Re: Compiling UDF DLL under Win32