On Monday 13 Jul 2009 2:09:06 pm Krishnakant wrote: > > Bad idea. Please let the install script create a separate system user > > for gnukhata and enable that user to create databases, etc. in PgSQL. > > Running as the postgres user is strongly deprecated. > > But this is what postgresql developres themselves are recommending. I > personally know and even met of of the core developers of pg and he is > also a consultent. He told me that the best thing to do is keep the > postgres user as dedicated user which can access the database from only > localhost. then you can have the xmlrpc server run on that same machine > and so the remote clients just can't access the database directly, > because the access is denyed.
I dont believe this. No one in his right mind would run anything by the 'postgres' user. One always runs with a dedicated user with the minimal possible rights - and rights *only* on the specific database in question. -- regards Kenneth Gonsalves Associate NRC-FOSS http://nrcfosshelpline.in/web/ -- http://mm.glug-bom.org/mailman/listinfo/linuxers
