"Tamsin" <tg_mail@bryncadfan.co.uk> writes:
> I'm trying to sort out security on my db, configuring pg_hba.conf etc. I
> just wanted to check that this in't possible - I want my postgres linux user
> to be able to connect to the database without a password, but I don't want
> other users logged on to the linux box to be able to connect as postgres
> i.e. by going psql dbname postgres.
I should think 'ident' authentication would get the job done, assuming
that your box is running identd. Of course identd is only as
trustworthy as the machine's admin, but if you don't trust root on your
server then password security is academic anyway. I wouldn't recommend
allowing ident auth for logins from untrusted machines, natch.
regards, tom lane
