Обсуждение: running postgresql with a different id other than postgres user

Поиск
Список
Период
Сортировка

running postgresql with a different id other than postgres user

От
"Maki Smith (US - IFS)"
Дата:
To meet our security requirement, we would like to use another account other than postgres to install and run postgreSQL.  Is this possible to do?

Thank you for information
-----------------------------------------------------------------------------------------------------------------------------------------
Maki Smith

The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.

Re: [MASSMAIL] running postgresql with a different id other than postgres user

От
"Gilberto Castillo"
Дата:
> To meet our security requirement, we would like to use another account
> other than postgres to install and run postgreSQL.  Is this possible to
> do?
>
> Thank you for information

Yes, create other user with privilegius of user postgre

>
-----------------------------------------------------------------------------------------------------------------------------------------
> Maki Smith
>
> ______________________________________________________________________
> The information transmitted, including any attachments, is intended only
> for the person or entity to which it is addressed and may contain
> confidential and/or privileged material. Any review, retransmission,
> dissemination or other use of, or taking of any action in reliance upon,
> this information by persons or entities other than the intended recipient
> is prohibited, and all liability arising therefrom is disclaimed. If you
> received this in error, please contact the sender and delete the material
> from any computer. PricewaterhouseCoopers LLP is a Delaware limited
> liability partnership.  This communication may come from
> PricewaterhouseCoopers LLP or one of its subsidiaries.
>


--
Saludos,
Gilberto Castillo
ETECSA, La Habana, Cuba



Re: [MASSMAIL] running postgresql with a different id other than postgres user

От
"Maki Smith (US - IFS)"
Дата:
Is it possible we can use other user during installation?
Any concern of future patching and upgrade activity?  


-----------------------------------------------------------------------------------------------------------------------------------------
Maki Smith US IT - Technical Design Authority Infrastructure | PricewaterhouseCoopers LLP 
4040 West Boy Scout Boulevard, Tampa, FL 33607 | Phn: 1.813.351.2481 | Fax: 1.813.375.6084 | RightFax: 1.813.375.6087 | Notes: maki.smith@us.pwc.com | gmail: maki.smith@pwc.com

On Tue, Jul 19, 2016 at 4:22 PM, Gilberto Castillo <gilberto.castillo@etecsa.cu> wrote:

> To meet our security requirement, we would like to use another account
> other than postgres to install and run postgreSQL.  Is this possible to
> do?
>
> Thank you for information

Yes, create other user with privilegius of user postgre

> -----------------------------------------------------------------------------------------------------------------------------------------
> Maki Smith
>
> ______________________________________________________________________
> The information transmitted, including any attachments, is intended only
> for the person or entity to which it is addressed and may contain
> confidential and/or privileged material. Any review, retransmission,
> dissemination or other use of, or taking of any action in reliance upon,
> this information by persons or entities other than the intended recipient
> is prohibited, and all liability arising therefrom is disclaimed. If you
> received this in error, please contact the sender and delete the material
> from any computer. PricewaterhouseCoopers LLP is a Delaware limited
> liability partnership.  This communication may come from
> PricewaterhouseCoopers LLP or one of its subsidiaries.
>


--
Saludos,
Gilberto Castillo
ETECSA, La Habana, Cuba



The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.

Re: running postgresql with a different id other than postgres user

От
"David G. Johnston"
Дата:
On Tue, Jul 19, 2016 at 3:16 PM, Maki Smith (US - IFS) <maki.smith@pwc.com> wrote:
To meet our security requirement, we would like to use another account other than postgres to install and run postgreSQL.  Is this possible to do?


​You need to tell us by what method you intend to install PostgreSQL, and on what platform, before this can be usefully answered.​

The documentation covers how to go about installing from source.  It should cover how to choose a label different than "postgres" if you so desire.

David J.

Re: running postgresql with a different id other than postgres user

От
Wolfgang Wilhelm
Дата:
Hello,

a little more information would be helpful.
But to make things short: The user who starts the initdb command is the database admin user. When you install PostgreSQL via the tool of your distribution like apt (Debian), yum or whatever then the package manager generates the user postgres and executes initdb as user postgres.

Kind regards,
Wolfgang




David G. Johnston <david.g.johnston@gmail.com> schrieb am 21:34 Dienstag, 19.Juli 2016:


On Tue, Jul 19, 2016 at 3:16 PM, Maki Smith (US - IFS) <maki.smith@pwc.com> wrote:
To meet our security requirement, we would like to use another account other than postgres to install and run postgreSQL.  Is this possible to do?


​You need to tell us by what method you intend to install PostgreSQL, and on what platform, before this can be usefully answered.​

The documentation covers how to go about installing from source.  It should cover how to choose a label different than "postgres" if you so desire.

David J.



Re: running postgresql with a different id other than postgres user

От
"Maki Smith (US - IFS)"
Дата:
I successfully installed from source with a different user other than postgres on Ubuntu.
However now I am curious we can do any modification like this when I install PostgreSQL via the tool, like apt-get or yum.
As you mentioned, these tools creates postgres user automatically. 

If we use a tool like this, we need to create another superuser as post-installation procedure to switch user, and stop usage of postgres default user..

Just curious.. how people is doing this type of scenario...


-----------------------------------------------------------------------------------------------------------------------------------------
Maki Smith US IT - Technical Design Authority Infrastructure | PricewaterhouseCoopers LLP 
4040 West Boy Scout Boulevard, Tampa, FL 33607 | Phn: 1.813.351.2481 | Fax: 1.813.375.6084 | RightFax: 1.813.375.6087 | Notes: maki.smith@us.pwc.com | gmail: maki.smith@pwc.com

On Wed, Jul 20, 2016 at 4:12 AM, Wolfgang Wilhelm <wolfgang20121964@yahoo.de> wrote:
Hello,

a little more information would be helpful.
But to make things short: The user who starts the initdb command is the database admin user. When you install PostgreSQL via the tool of your distribution like apt (Debian), yum or whatever then the package manager generates the user postgres and executes initdb as user postgres.

Kind regards,
Wolfgang




David G. Johnston <david.g.johnston@gmail.com> schrieb am 21:34 Dienstag, 19.Juli 2016:


On Tue, Jul 19, 2016 at 3:16 PM, Maki Smith (US - IFS) <maki.smith@pwc.com> wrote:
To meet our security requirement, we would like to use another account other than postgres to install and run postgreSQL.  Is this possible to do?


​You need to tell us by what method you intend to install PostgreSQL, and on what platform, before this can be usefully answered.​

The documentation covers how to go about installing from source.  It should cover how to choose a label different than "postgres" if you so desire.

David J.





The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.

Re: running postgresql with a different id other than postgres user

От
Kris Deugau
Дата:
Maki Smith (US - IFS) wrote:
> I successfully installed from source with a different user other than
> postgres on Ubuntu.
> However now I am curious we can do any modification like this when I
> install PostgreSQL via the tool, like apt-get or yum.
> As you mentioned, these tools creates postgres user automatically.
>
> If we use a tool like this, we need to create another superuser as
> post-installation procedure to switch user, and stop usage of postgres
> default user..
>
> Just curious.. how people is doing this type of scenario...

Can you explain your security requirement in more detail?  It sounds to
me like you're going to a lot of effort for something that isn't going
to do what you want to do, or what you think it'll do.

It may also cause issues on package upgrades, because the packages will
continue to operate on the assumption that the username created by the
package is the one that Postgres is running under.  You'd likely end up
running Postgres in a by-hand enough manner that you may as well just
install from source anyway.

-kgd