agora inbox for postgres@postgres.berkeley.edu  
help / color / mirror / Atom feed
new to postgres
2+ messages / 2 participants
[nested] [flat]

* new to postgres
@ 1994-05-03 15:05 Egan F. Ford <egan@cbs.cis.com>
  1994-05-03 23:58 ` Re: new to postgres Paul M. Aoki <aoki@postgres.Berkeley.EDU>
  0 siblings, 1 reply; 2+ messages in thread

From: Egan F. Ford @ 1994-05-03 15:05 UTC (permalink / raw)
  To: legacy

I've just installed postgres 4.2 on my linux box, it works great.  However I
have data that my be secure.  Can anyone on the internet with a postgres
client (e.g. monitor) access my database through post 4321?

Thanks.
-- 
Egan F. Ford
egan@cbs.cis.com

===============================================================================
    To add/remove yourself from the POSTGRES mailing list: send mail with 
    the subject line ADD or DEL to "postgres-request@postgres.Berkeley.EDU"

    If this fails, send mail to "post_questions@postgres.Berkeley.EDU" and
    a human will deal with it.  DO NOT post to the "postgres" mailing list.
===============================================================================




^ permalink  raw  reply  [nested|flat] 2+ messages in thread

* Re: new to postgres
  1994-05-03 15:05 new to postgres Egan F. Ford <egan@cbs.cis.com>
@ 1994-05-03 23:58 ` Paul M. Aoki <aoki@postgres.Berkeley.EDU>
  0 siblings, 0 replies; 2+ messages in thread

From: Paul M. Aoki @ 1994-05-03 23:58 UTC (permalink / raw)
  To: Egan F. Ford <egan@cbs.cis.com>; +Cc: legacy

egan@cbs.cis.com (Egan F. Ford) writes:
> I've just installed postgres 4.2 on my linux box, it works great.  However I
> have data that my be secure.  Can anyone on the internet with a postgres
> client (e.g. monitor) access my database through post 4321?

correct.  this is documented in various places in the reference and
user manuals; if you want network authentication we do provide code 
to support either kerberos v4 or v5beta2 (it has not been tested with
v5beta3).

you can always do the reserved port thing.  this gives you as much
protection as rlogin/rsh, which is to say, very little (since any
moron can be superuser on their own machine).

it would not be rocket science to hack in a password scheme but in 
this new, unfriendly era of widespread network sniffing, password 
schemes are questionable security at best.

general note:
i know i'm behind on message traffic.  sorry.  things are in sort of
tizzy at berkeley right now.
--
  Paul M. Aoki  |  CS Div., Dept. of EECS, UCB  |  aoki@postgres.Berkeley.EDU
                |  Berkeley, CA 94720           |  ...!uunet!ucbvax!aoki

===============================================================================
    To add/remove yourself from the POSTGRES mailing list: send mail with 
    the subject line ADD or DEL to "postgres-request@postgres.Berkeley.EDU"

    If this fails, send mail to "post_questions@postgres.Berkeley.EDU" and
    a human will deal with it.  DO NOT post to the "postgres" mailing list.
===============================================================================




^ permalink  raw  reply  [nested|flat] 2+ messages in thread


end of thread, other threads:[~1994-05-03 23:58 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
1994-05-03 15:05 new to postgres Egan F. Ford <egan@cbs.cis.com>
1994-05-03 23:58 ` Paul M. Aoki <aoki@postgres.Berkeley.EDU>

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox