Re: I'd love to know what the rest of this error message is. - Mailing list pgsql-general

From Jan Muszynski
Subject Re: I'd love to know what the rest of this error message is.
Date
Msg-id 45E88D66.17505.C91C024@postgres.jancm.org
Whole thread Raw
In response to Re: I'd love to know what the rest of this error message is.  (dlivesay@covad.net)
Responses Re: I'd love to know what the rest of this error message is.  (Dave Livesay <dlivesay@covad.net>)
List pgsql-general
On 2 Mar 2007 at 16:33, dlivesay@covad.net wrote:

> Quoting Bill Moran <wmoran@potentialtech.com>:
>
> > In response to dlivesay@covad.net:
<snip>
> >> "Your local 'Administrators' group contains 'Authenticated Users'.
> >> This is a common configuration error that causes security issues. For this
> >> reason, Postgr"
> >>
<snip>
> >> Does anybody know what the rest of this message might be? Bonus
> >> points if you
> >> can explain what it means, and especially if you can explain what to
> >> do about
> >> it.
> >>
> >> I suspect this is more a WIndows problem than a PostgreSQL problem, but I'm
> >> afraid I don't know that much about Windows. I'm a Mac/Unix kind of
> >> guy, and I
> >> try to avoid using WIndows whenever possible because this kind of
> >> stuff always
> >> happens.
> >
> > I don't know 100%, but it looks like the "authenticated users" group is a
> > member of the "administrators" group.  This means that anyone who logs in
> > to the workstation is an administrator.  It's a complete lack of security,
> > but it's also very common (in my experience) for Windows workstations.
> >
> > I'm guessing that the PG installer is being anal and refusing to allow you
> > to install on such a poorly configured system, but that part I don't know.
> >
> > My suggestion would be to fix the users/groups on the Windows system so there
> > is a special administrative user, then remove authenticated users from the
> > administrator group.
>
> When I saw this error I immediately went to the "Local Users and
> Groups" control
> panel to see if I could figure out what the heck it was talking about, and I
> swear there is no group called "Authenticated Users". That's what's so
> baffling
> about this, apart from the incomplete error message.

Authenticated users is a psuedogroup generated internally. You won't find
it listed as a group perse, but if you go to the Administrators group and
check it's membership you will see it listed there.

-jcm

pgsql-general by date:

Previous
From: Dave Livesay
Date:
Subject: Re: I'd love to know what the rest of this error message is.
Next
From: Dave Livesay
Date:
Subject: Re: I'd love to know what the rest of this error message is.