agora inbox for postgres@postgres.berkeley.edu  

help / color / mirror / Atom feed

From: Michael Graff <explorer@iastate.edu>
To: postgres@postgres.Berkeley.EDU
Subject: Postgres and Kerberos, take III
Date: Wed, 23 Nov 1994 22:30:20 CST
Message-ID: <9411240430.AA20439@tbird.cc.iastate.edu> (raw)


I'm still trying to get a system installed using Kerberos 4 authentication.

Here are my goals.  I'm hoping they are all possible.  :)

1)  Have a standard installation, which will allow multiple installs on
    different machines around campus from the same compiled binaries.  This
    means the initial postgres superuser will need to change depending on
    who is installing it.  I think I can do that by munging the line in
    global1.bki, right?

	Change
		insert OID = 0 ( postgres PGUID t t t t )
	to
		insert OID = 0 ( USER USERUID t t t t )

	where USER and USERUID are from the person currently running
	the initdb script (or a wrapper around initdb, or something)

2)  Have no need to make a postgres kerberos instance.  Doing so with goal #1
    would make kerberos authentication pointless because the postgres password
    would need to be widely known, and if anyone can become postgres, anyone
    can be a superuser, more or less.

3)  Not have anything go wrong.  *wishes*  ;)

Is my strategy on #1 at least close to correct?

--Michael

--
Michael Graff    Iowa State University Computation Center      Project Vincent
215 Durham                voice: (515) 294-4994           explorer@iastate.edu
Ames, IA  50011           fax:   (515) 294-1717           gg.mlg@isumvs.bitnet

==============================================================================
   To add/remove yourself to/from the POSTGRES mailing list: send mail with 
   the subject line ADD or DEL to "postgres-request@postgres.Berkeley.EDU".
   If this fails, send mail to "post_questions@postgres.Berkeley.EDU" and
   a human will deal with it.  DO NOT post to the "postgres" mailing list.
==============================================================================
              URL: http://s2k-ftp.CS.Berkeley.EDU:8000/postgres/

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: postgres@postgres.berkeley.edu
  Cc: explorer@iastate.edu
  Subject: Re: Postgres and Kerberos, take III
  In-Reply-To: <9411240430.AA20439@tbird.cc.iastate.edu>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox