Re: Win32 Question about the right level for the account that PostgreSQL is installed under... - Mailing list pgsql-hackers

From Magnus Hagander
Subject Re: Win32 Question about the right level for the account that PostgreSQL is installed under...
Date
Msg-id 6BCB9D8A16AC4241919521715F4D8BCE475B9D@algol.sollentuna.se
Whole thread Raw
In response to Win32 Question about the right level for the account that PostgreSQL is installed under...  ("Dann Corbit" <DCorbit@connx.com>)
List pgsql-hackers
> Sorry to be such a pest.  Since an administrator will get this error:
>
> creating template1 database in u:/msys/1.0/local/pgsql/data/base/1 ...
> execution of PostgreSQL by a user with administrative
> permissions is not permitted.
> The server must be started under an unprivileged user ID to
> prevent possible system security compromise.  See the
> documentation for more information on how to properly start
> the server.
> child process was terminated by signal 1
> initdb.exe: failed
>
> What is the highest safe level to do the installation under Win32?

Must *not* be a member of the Administrators local group or any group
which nests into this group (this includes, of course, Domain Admins,
but may include other groups depending on your setup).
Must *not* be a member of the Power Users local group or any group which
nests into this group.

That's all we check.

Don't grant it unnecessary privileges either, but that's generally not
done by default in most setups. It needs log in as a service outside the
normal ones, but no others. If you run as service. Otherwise, just log
on locally for you to runas to it.

Yes, this needs to go intot he documentation :-(

//Magnus



pgsql-hackers by date:

Previous
From: Joe Conway
Date:
Subject: beta2 rpms
Next
From: Eyinagho Newton
Date:
Subject: Thesis on PostgreSQL