Re: sudo/access to the postres OS user

Поиск
Список
Период
Сортировка
От Birchall, Austen
Тема Re: sudo/access to the postres OS user
Дата
Msg-id 4E154FB60786D74BB4DFDC97BF991CAC08ABEC@EXXCMPD1DAG2.cmpd1.metoffice.gov.uk
обсуждение исходный текст
Ответ на Re: sudo/access to the postres OS user  (Athanasios Kostopoulos <athanasios.kostopoulos@classmarkets.com>)
Ответы Re: sudo/access to the postres OS user  (Gary Chambers <gwchamb@gwcmail.com>)
Список pgsql-novice

sudo -u postgres /bin/bash

[sudo] password for test:

 

Sorry, user test is not allowed to execute '/bin/bash' as postgres

 

So it looks like this is not allowed

 

Austen

 

From: Athanasios Kostopoulos [mailto:athanasios.kostopoulos@classmarkets.com]
Sent: 15 August 2013 15:04
To: Birchall, Austen
Cc: pgsql-novice@postgresql.org
Subject: Re: [NOVICE] sudo/access to the postres OS user

 

Doesn't sudo -u postgres /bin/bash suffice? Or is not allowed by the sys admin?

 

On Thu, Aug 15, 2013 at 11:51 AM, Birchall, Austen <austen.birchall@metoffice.gov.uk> wrote:

9.2 on Red Hat 6

Our OS Sys Admin have decided to withdraw my (DBA) access to the OS postgres account - so instead of
ssh/logging in to a DB host I I have to login in as 'myself' and then gain access to psql etc. via sudo
such as by doing
 PSQL access as the postgres user
sudo -u postgres /usr/bin/psql <command line options>
which I have been granted permissions to do.

I have the following questions regarding this:

1.      Is this standard/best practise?

2.      In simple terms what is justification for dong this - looking at it from a DBA point of view?

3.      As myself I current have no permissions on the ..../psql/data directory and its sub-directories including the log files, which IMHO I need in order to be able to function as a DBA - is there a preferred way in which I can be granted/gain this access other than by granting rights on files at an individual level?

Happy to (try to) explain further if none of this makes much sense.

Thanks in advance as always

Austen


Austen Birchall  Senior Database Administrator
Met Office


--
Sent via pgsql-novice mailing list (pgsql-novice@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-novice

 

 

classmarkets GmbH | Schumannstraße 6 | 10117 Berlin | Deutschland
Tel: +49 (0)30 56 59 001-0 | Fax: +49 (0)30 56 59 001-99 | www.classmarkets.com

Amtsgericht Charlottenburg HRB 111815 B | USt.Id.Nr: DE 260731582
Geschäftsführer: Veit Mürz, Fabian Ströhle

Diese Nachricht (inklusive aller Anhänge) ist vertraulich. Sie darf ausschließlich durch den vorgesehenen Empfänger und Adressaten gelesen, kopiert oder genutzt werden. Sollten Sie diese Nachricht versehentlich erhalten haben, bitten wir, den Absender (durch Antwort-E-Mail) hiervon unverzüglich zu informieren und die Nachricht zu löschen. Jede unerlaubte Nutzung oder Weitergabe des Inhalts dieser Nachricht, sei es vollständig oder teilweise, ist unzulässig. Bitte beachten Sie, dass E-Mail-Nachrichten an den Absender nicht für fristgebundene Mitteilungen geeignet sind. Fristgebundene Mitteilungen sind daher ausschließlich per Post oder per Telefax zu übersenden.

В списке pgsql-novice по дате отправления:

Предыдущее
От: Athanasios Kostopoulos
Дата:
Сообщение: Re: sudo/access to the postres OS user
Следующее
От: Gary Chambers
Дата:
Сообщение: Re: sudo/access to the postres OS user