From owner-freebsd-questions@FreeBSD.ORG Fri Sep 12 17:10:22 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2CD9516A4BF for ; Fri, 12 Sep 2003 17:10:22 -0700 (PDT) Received: from borg.starbase.net (mail.big-blue.net [208.233.101.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6869A43FF9 for ; Fri, 12 Sep 2003 17:10:21 -0700 (PDT) (envelope-from alex@big-blue.net) Received: from borg.starbase.net (borg.starbase.net [208.233.101.2]) by borg.starbase.net (8.12.9/8.11.1) with ESMTP id h8CNtUS4010083; Fri, 12 Sep 2003 19:55:30 -0400 (EDT) (envelope-from alex@big-blue.net) Date: Fri, 12 Sep 2003 19:55:30 -0400 (EDT) From: alexander v p Sender: alex@borg.starbase.net To: Kirk Strauser In-Reply-To: <87ad99bohs.fsf@strauser.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: "Andrew L. Gould" cc: freebsd-questions@freebsd.org Subject: Re: Trying to secure PostgreSQL X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Sep 2003 00:10:22 -0000 story short: su -l postgres -c "/usr/local/pgsql/bin/postmaster -o -i -D /usr/local/pgsql/data -s &" in the /etc/rc.local and it will start postgres w/o asking for password. now, be carefull and read ( man postmaster) about switches. if you need more help, please let us know. if it works let us know also :-). i'll go to dig up some more info about config files in /data. $0.02 alex On Fri, 12 Sep 2003, Kirk Strauser wrote: > At 2003-09-12T22:36:43Z, alexander v p writes: > > > look in /usr/local/pgsql/data/pg_hba.conf > > by default is: > > > > local all all trust > > host all all 127.0.0.1 255.255.255.255 trust > > > > what you have to do is to change trust into password or md5 > > hope that helps > > alex > > p.s. restart postgres after you change the conf file. > > But when I do that, I'm prompted to enter the password for 'pgsql' whenever > I start the service. That's pretty inconvenient when it's part of the boot > process; the system would be effectively hung until I accessed the box, > entered the password, and let the init sequence finish. > > I'd read of people coming up with a mechanism to pipe a password from some > (hopefully) secure file on the system into the password prompt. Is that > really the best way to handle this? > -- > Kirk Strauser >