Re: tracking down breakins?

"Johnson, Shaunn" <SJohnson6@bcbsm.com> writes:
> A similar question to what David Siebert was
> asking - I am trying to locate users that are trying
> to log in as someone else in PostgreSQL.

Again, I think log_connections is what you're looking for.

Note that a failed connection attempt is *not* necessarily a sign of
evil intent.  For example, I believe that psql does not prompt the
user for a password unless its initial attempt to connect is rejected
by the server with a "password required" error.  So you will see a
failed attempt and then a (hopefully) successful attempt a few seconds
later, whenever you are using password authentication.

            regards, tom lane