Re: Using PG with Windows EFS or TrueCrypt for encryption - Mailing list pgsql-general

From Brady Mathis
Subject Re: Using PG with Windows EFS or TrueCrypt for encryption
Date
Msg-id AANLkTi=oBHz_U2X22SJJWWki6oA=J1MZAk2jp3d9vzvc@mail.gmail.com
Whole thread Raw
In response to Re: Using PG with Windows EFS or TrueCrypt for encryption  ("Massa, Harald Armin" <chef@ghum.de>)
List pgsql-general
Hey Harald - 

The permissions!  Of course!  Thanks, you fixed me.

Brady

On Wed, Dec 8, 2010 at 6:18 AM, Massa, Harald Armin <chef@ghum.de> wrote:
Brady,

Then I attempted to mount a normal encrypted volume with TrueCrypt, move the data\ and sub-folders to this volume and reconfigure PG to point to this as the data folder.  Now, the PG service will not start at all.

moving data and subfolder on NTFS is a Level-20 operation. The usual cases for PostgreSQL-Service not starting ar:

a) user account has wrong privileges
b) user account has lost "Logon as Service"
c) password of user account was changed / invalidate by some system policy / administrator
d) user account which the PostgreSQL service logs on with is not able to acces the data-directories. d) is usually anaylizable via the system eventviewer.

Most likely cause during your copy operation: the permission on the directories where changed. OR: the link to the Data-directory (part of the service-configuration) within services.msc is no longer valid (as in: data in different place)

I can confirm that is possible to have a database on a TrueCrypt encrypted volume. It is dog slow. My impression is that data from that encypted volume is not really cached.

Harald

 
Has anyone implemented something like this for PG in Windows?

Thanks!
Brady

--
Brady Mathis | bmathis@r-hsoftware.com | 877.696.6547 ext 102



--
GHUM GmbH
Harald Armin Massa
Spielberger Straße 49
70435 Stuttgart
0173/9409607

Amtsgericht Stuttgart, HRB 734971
-
persuadere.
et programmare



--
Brady Mathis | bmathis@r-hsoftware.com | 877.696.6547 ext 102

pgsql-general by date:

Previous
From: Dmitriy Igrishin
Date:
Subject: Extended query protocol and exact types matches.
Next
From: Josh Kupershmidt
Date:
Subject: monitoring warm standby lag in 8.4?