Re: [pg_hba.conf] publish own Python application using PostgreSQL - Mailing list pgsql-general

From Charles Clavadetscher
Subject Re: [pg_hba.conf] publish own Python application using PostgreSQL
Date
Msg-id 55992CE9.9090305@swisspug.org
Whole thread Raw
In response to [pg_hba.conf] publish own Python application using PostgreSQL  (<c.buhtz@posteo.jp>)
Responses Re: [pg_hba.conf] publish own Python application using PostgreSQL  (<c.buhtz@posteo.jp>)
List pgsql-general
Hi

I am not really an expert, but from your description I guess that you
assume an existing PostgreSQL installation on your customers' server. If
that is the case you probably won't get around giving instructions to
your customer and let them do the change. I would not like to install
applications that change settings in pg_hba.conf on my server. Besides
you may consider limiting the trust access to the specific user and
specific database that your application needs to access.

Bye
Charles

On 7/5/2015 12:15, c.buhtz@posteo.jp wrote:
> I have my own Python application using a PostgreSQL database over
> SQLAlchemy.
>
> Currently I pack the application in a deb-file.
> After installation (on a fresh system! Ubuntu 14.04.2) it doesn't run
> because of some PostgreSQL-settings.
> Of course I understand why and I know (a little bit) which settings I
> have to do to make it run.
>
> But the point is I don't want to plague my user to do that.
>
> How could this be solved?
> How can I release a application using a local PostgreSQL-database.
> I am not sure if the modifications I do are correct or elegant (see
> below).
>
> These are the modification I have to do to make my application run with
> the connetion string "postgres://puser@localhost/FoobarTest".
>
> The settings are about
> the /etc/postgresql/9.3/main/pg_hba.conf file.
> There I change this line
> host    all             all             127.0.0.1/32            md5
> to
> host    all             all             127.0.0.1/32            trust
>
> I have to create a user without a password (beside the admin/postgres),
> too.
>
>


pgsql-general by date:

Previous
From:
Date:
Subject: [pg_hba.conf] publish own Python application using PostgreSQL
Next
From: "Greg Sabino Mullane"
Date:
Subject: Re: database-level lockdown