Re: [ADMIN] [HACKERS] PostgreSQL pam ldap document

2005-03-11 Thread Dick Davies
* Adrian Nida <[EMAIL PROTECTED]> [0307 18:07]: > > >>Here is my attempt at doing so: http://itc.musc.edu/wiki/PostGreSQL > > >I get a "not exists" error on that URL. > Sorry, I renamed the URL after someone pointed out the correct spelling. > This was a link to the old one. I apologize for t

Re: [ADMIN] pg_hba.conf

2005-02-22 Thread Dick Davies
* Tom Lane <[EMAIL PROTECTED]> [0218 15:18]: > Perhaps easier would be to set "PGSSLMODE=allow" (or even "disable") in > the client environment. This will work for libpq-based clients; there > may be something equivalent if you are using other software. Thanks Tom, I'll give that a go. > Also:

Re: [ADMIN] pg_hba.conf

2005-02-22 Thread Dick Davies
* Donald Fraser <[EMAIL PROTECTED]> [0257 13:57]: > If postgres has ssl enabled then it will by default negotiate to use ssl, > regardless of the host or hostssl settings in pg_hba. Your client software > needs to refuse ssl connections then it will fall back to a non-ssl > connection so long as th

Re: [ADMIN] pg_hba.conf

2005-02-22 Thread Dick Davies
* K?PFERL Robert <[EMAIL PROTECTED]> [0228 12:28]: > According to the excelent doc, the _first_ matching entry will be used. If that were true, the below would work, surely? > C:\> I have this: > C:\> > C:\> [EMAIL PROTECTED]:postgresql80-server$ cat /opt/pgsql/data/pg_hba.conf > C:\> # TYPE

[ADMIN] pg_hba.conf

2005-02-22 Thread Dick Davies
Just needed clarification on how pg_hba.conf operates. Does a specific host take precedence over a more general network setting? The local socket is only accessible to a certain group, but I don't want the overhead of SSL for loopback connections. If I connect to the server from the local machin

Re: [ADMIN] empty a database

2005-02-16 Thread Dick Davies
* Christopher Browne <[EMAIL PROTECTED]> [0223 20:23]: > Clinging to sanity, [EMAIL PROTECTED] (Dick Davies) mumbled into her beard: > > Is there a neat way to clean out a database via SQL commands? > > > > i.e. get rid of tables, sequences, integers, etc. > >

Re: [ADMIN] empty a database

2005-02-15 Thread Dick Davies
* Tom Lane <[EMAIL PROTECTED]> [0232 16:32]: > Dick Davies <[EMAIL PROTECTED]> writes: > > Is there a neat way to clean out a database via SQL commands? > > i.e. get rid of tables, sequences, integers, etc. > > > At present I'm using dropdb/createdb, but t

[ADMIN] empty a database

2005-02-15 Thread Dick Davies
Is there a neat way to clean out a database via SQL commands? i.e. get rid of tables, sequences, integers, etc. At present I'm using dropdb/createdb, but thats' far from ideal and I think it's causing postgres to do more mork than it needs to... -- 'My life, and by extension everyone else's, i

[ADMIN] automating remote pg_dump

2005-02-10 Thread Dick Davies
I notice pg_dump does'nt have a '-P' flag to provide a password, so I assume you generally use it to pull data through a socket. I need to run it remotely (to dump a live db and clone its structure to a test db for unit testing), has anyone got a way to do this? I've tried 'echo pass | pg_dump -h

Re: [ADMIN] removing create database privileges?

2005-02-10 Thread Dick Davies
* Tom Lane <[EMAIL PROTECTED]> [0231 20:31]: > Dick Davies <[EMAIL PROTECTED]> writes: > > I'm probably missing something obvious, but how do I revoke the 'create > > database' > > privilege for a user? > > See ALTER USER. Thanks Tom. As us

[ADMIN] removing create database privileges?

2005-02-10 Thread Dick Davies
I'm probably missing something obvious, but how do I revoke the 'create database' privilege for a user? -- 'Oh, wait you're serious. Let me laugh even harder.' -- Bender Rasputin :: Jack of All Trades - Master of Nuns ---(end of broadcast)---

Re: [ADMIN] PAM ldap

2005-01-18 Thread Dick Davies
* Kavan, Dan (IMS) <[EMAIL PROTECTED]> [0156 16:56]: > Thanks for the reply, > > I did compile --with-pam. Although, the $PATH for the postgres user - > who I used to compile with didn't have /lib and /lib64 in it's path. I > don't see anything is configure.in or config.log to hint that pam isn

Re: [ADMIN] PAM ldap

2005-01-16 Thread Dick Davies
* Kavan, Dan (IMS) <[EMAIL PROTECTED]> [0149 18:49]: > > Hi, I'm running postgresql 8.0.rc5 on SUSE. > I have the pg_hba.conf file configured with > local all smith ident sameuser > host all smith ident sameuser > > The way authentication works with that is that configuration is th

Re: [ADMIN] pam

2005-01-14 Thread Dick Davies
* Kavan, Dan (IMS) <[EMAIL PROTECTED]> [0122 05:22]: > Hi, > > I configured Postgres with PAM. I was wondering how to implement this. > Does this mean I will still need to create individual users on the > database or can I assign users rights from a LDAP server? in my experience, you sti

Re: [ADMIN] Installing PostgreSQL as "postgress" versus "root" Debate!

2005-01-13 Thread Dick Davies
* Dawid Kuroczko <[EMAIL PROTECTED]> [0151 12:51]: > On Thu, 13 Jan 2005 12:20:41 +0000, Dick Davies > <[EMAIL PROTECTED]> wrote: > > > But only if either setuid root or executed by root. Hey, on my > > > system even /bin/sh is owned by root; it would b

Re: [ADMIN] Installing PostgreSQL as "postgress" versus "root" Debate!

2005-01-13 Thread Dick Davies
* Dawid Kuroczko <[EMAIL PROTECTED]> [0117 12:17]: > On Wed, 12 Jan 2005 20:52:16 -0800, Joshua D. Drake > <[EMAIL PROTECTED]> wrote: > > >Whatever, I'll keep root only for absolutely restricted use & install > > >under a separate user account. Works just fine & it makes the auditors > > >& sysadm

Re: [ADMIN] postgresql 7.4.6 and pam_ldap

2005-01-06 Thread Dick Davies
* Thomas Leduc <[EMAIL PROTECTED]> [0130 09:30]: > Le 5 janvier 2005 ? 22:20, G?mes G?za a ?crit : > > $ cat /etc/pam.d/postgresql > authrequired/lib/security//pam_ldap.so Stick a 'debug' after the .so there, see if anything else turns up. > $ cat pg_hba.conf > local all