You might want to take a look at your pg_hba.conf file to see if the auth-method is "trust".
Details are here: http://www.postgresql.org/idocs/index.php?client-authentication.html#PG-HBA. CONF -Nick -------------------------------------------------------------------------- Nick Fankhauser [EMAIL PROTECTED] Phone 1.765.935.4283 Fax 1.765.962.9788 Ray Ontko & Co. Software Consulting Services http://www.ontko.com/ > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Jodi Kanter > Sent: Thursday, December 20, 2001 11:19 AM > To: Postgres Admin List > Subject: [ADMIN] user passwords > > > why is it that I can sign in to the postgres database using PSQL without > having to specify a password for a user even thought one has been > specified > in pg_shadow? > > I signed in to Linux with my own personal id (which is NOT a postgres > account) and used the following command to get in: > > psql -U postgres dbname > > It let me in to our database as postgres (a superuser account) > without even > prompting for a password. > > Am I missing something? > thanks > Jodi > _______________________________________________________________ Jodi L > Kanter BioInformatics Database Administrator University of Virginia (804) > 924-2846 [EMAIL PROTECTED] > > > ---------------------------(end of broadcast)--------------------------- > TIP 6: Have you searched our list archives? > > http://archives.postgresql.org > ---------------------------(end of broadcast)--------------------------- TIP 2: you can get off all lists at once with the unregister command (send "unregister YourEmailAddressHere" to [EMAIL PROTECTED])