Thread: Database Security

Database Security

From
Danilo Freitas da Costa
Date:
Hi all!!!

I'm using Postgres at company I work for few time.
I already tried many ways to create a security for my database but not
sucessfull.
The postgres was installed with default configuration and I had definied
"postgres" as root user.
However, someone else user I create have full access on all databases in
my server, with some limitations.
How can I configure access level to a database? How can I force every
user type your password to access the database?

Thanks,
Danilo

Re: Database Security

From
Raymond O'Donnell
Date:
On 23/05/2007 21:31, Danilo Freitas da Costa wrote:

> How can I configure access level to a database? How can I force every
> user type your password to access the database?

http://www.postgresql.org/docs/8.2/static/client-authentication.html

Ray.

---------------------------------------------------------------
Raymond O'Donnell, Director of Music, Galway Cathedral, Ireland
rod@iol.ie
---------------------------------------------------------------

Re: Database Security

From
"Ben Trewern"
Date:
Look at changing your pg_hba.conf file

If you have a line in the file like:
host    all         all         127.0.0.1/32          trust
change it to:
host    all         all         127.0.0.1/32          md5

then run:
pg_ctl reload

should get you whare you want to be.

Ben

"Danilo Freitas da Costa" <cedes11@edza.com.br> wrote in message
news:4654A499.4090008@edza.com.br...
> Hi all!!!
>
> I'm using Postgres at company I work for few time.
> I already tried many ways to create a security for my database but not
> sucessfull.
> The postgres was installed with default configuration and I had definied
> "postgres" as root user.
> However, someone else user I create have full access on all databases in
> my server, with some limitations.
> How can I configure access level to a database? How can I force every user
> type your password to access the database?
>
> Thanks,
> Danilo
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: if posting/reading through Usenet, please send an appropriate
>       subscribe-nomail command to majordomo@postgresql.org so that your
>       message can get through to the mailing list cleanly
>