Re: sudo/access to the postres OS user - Mailing list pgsql-novice

From Athanasios Kostopoulos
Subject Re: sudo/access to the postres OS user
Date
Msg-id CAFnWstP6QB-cMaY_G9n2VK1Smy8raWeHiD1-REZTHCRT6z2Mgw@mail.gmail.com
Whole thread Raw
In response to sudo/access to the postres OS user  ("Birchall, Austen" <austen.birchall@metoffice.gov.uk>)
Responses Re: sudo/access to the postres OS user
List pgsql-novice
Doesn't sudo -u postgres /bin/bash suffice? Or is not allowed by the sys admin?


On Thu, Aug 15, 2013 at 11:51 AM, Birchall, Austen <austen.birchall@metoffice.gov.uk> wrote:
9.2 on Red Hat 6

Our OS Sys Admin have decided to withdraw my (DBA) access to the OS postgres account - so instead of
ssh/logging in to a DB host I I have to login in as 'myself' and then gain access to psql etc. via sudo
such as by doing
 PSQL access as the postgres user
sudo -u postgres /usr/bin/psql <command line options>
which I have been granted permissions to do.

I have the following questions regarding this:

1.      Is this standard/best practise?

2.      In simple terms what is justification for dong this - looking at it from a DBA point of view?

3.      As myself I current have no permissions on the ..../psql/data directory and its sub-directories including the log files, which IMHO I need in order to be able to function as a DBA - is there a preferred way in which I can be granted/gain this access other than by granting rights on files at an individual level?

Happy to (try to) explain further if none of this makes much sense.

Thanks in advance as always

Austen


Austen Birchall  Senior Database Administrator
Met Office


--
Sent via pgsql-novice mailing list (pgsql-novice@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-novice


classmarkets GmbH | Schumannstraße 6 | 10117 Berlin | Deutschland
Tel: +49 (0)30 56 59 001-0 | Fax: +49 (0)30 56 59 001-99 | www.classmarkets.com

Amtsgericht Charlottenburg HRB 111815 B | USt.Id.Nr: DE 260731582
Geschäftsführer: Veit Mürz, Fabian Ströhle

Diese Nachricht (inklusive aller Anhänge) ist vertraulich. Sie darf ausschließlich durch den vorgesehenen Empfänger und Adressaten gelesen, kopiert oder genutzt werden. Sollten Sie diese Nachricht versehentlich erhalten haben, bitten wir, den Absender (durch Antwort-E-Mail) hiervon unverzüglich zu informieren und die Nachricht zu löschen. Jede unerlaubte Nutzung oder Weitergabe des Inhalts dieser Nachricht, sei es vollständig oder teilweise, ist unzulässig. Bitte beachten Sie, dass E-Mail-Nachrichten an den Absender nicht für fristgebundene Mitteilungen geeignet sind. Fristgebundene Mitteilungen sind daher ausschließlich per Post oder per Telefax zu übersenden.

pgsql-novice by date:

Previous
From: "Birchall, Austen"
Date:
Subject: tablespace - datafile location
Next
From: "Birchall, Austen"
Date:
Subject: Re: sudo/access to the postres OS user