On May 13, 2013, at 12:20 AM, Tsunakawa, Takayuki wrote:

> I'm not sure whether there are any situations where the DBAs need to use 
> different username/password pairs for the OS user who starts/stops the 
> database server, and the database superuser.

I was thinking obscurity might be a good feature for some servers.  In the case 
of a brute force login attack, the attacker would need to figure out the 
username.   If the default is taken, the attacker would be less hindered.

-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Reply via email to