Re: tracking down breakins? - Mailing list pgsql-general

From Tom Lane
Subject Re: tracking down breakins?
Date
Msg-id 5010.1042048348@sss.pgh.pa.us
Whole thread Raw
In response to tracking down breakins?  ("Johnson, Shaunn" <SJohnson6@bcbsm.com>)
List pgsql-general
"Johnson, Shaunn" <SJohnson6@bcbsm.com> writes:
> A similar question to what David Siebert was
> asking - I am trying to locate users that are trying
> to log in as someone else in PostgreSQL.

Again, I think log_connections is what you're looking for.

Note that a failed connection attempt is *not* necessarily a sign of
evil intent.  For example, I believe that psql does not prompt the
user for a password unless its initial attempt to connect is rejected
by the server with a "password required" error.  So you will see a
failed attempt and then a (hopefully) successful attempt a few seconds
later, whenever you are using password authentication.

            regards, tom lane

pgsql-general by date:

Previous
From: Tom Lane
Date:
Subject: Re: Strange Error
Next
From: Lamar Owen
Date:
Subject: Re: [HACKERS] Have people taken a look at pgdiff yet?