On Tue, Feb 18, 2003 at 19:41:38 +0530,
"Shridhar Daithankar<shridhar_daithankar@persistent.co.in>" <shridhar_daithankar@persistent.co.in> wrote:
>
> Correct me if I am wrong, but when I run ident authentication, I have to
> create OS users right? And with sshd enabled on box for admin reasons, I
> don't want to let everybody login. I agree I can set their login to
> /sbin/false on linux or nologin on BSD.
Well yes, but the app has to run as some user. What you are probably missing
is that your don't have to use sameuser with ident authentication. You can
give a list of which database users an OS user is allowed to connect as.
So that the app OS user can be allowed connect to a specific list of DB
users without using a password.