Re: Health warning:

--000000000000412d9b0599eddaf6
Content-Type: text/plain; charset="UTF-8"

 > I don't recommend doing so because it's very insecure.
Sir, nothing is really secure.
There is at least one person with full privileges.



On Tue, 17 Dec 2019, 21:41 Stephen Frost, <[email protected]> wrote:

> Greetings,
>
> * Zahid Rahman ([email protected]) wrote:
> > You have to set to trust from peer the first time you download and
> install
> > postgres.
> > Because there is no default password.
> > After you create a password.
> > Then you can reset from trust.
>
> No- peer auth allows the "postgres" unix user, which is the user that
> the database runs as, to connect.
>
> To do so, you would first "sudo su - postgres" and then run psql, and
> then you'll be able to connect without any need for a password.  This is
> exactly what 'peer' auth is for and how it works and it's quite secure.
>
> There's no need to ever change the authentication method to be 'trust'
> and I don't recommend doing so because it's very insecure.
>
> > You also have to reboot your computer each time you change
> > etc/postgresql/12/main/pg_hba.conf.
> > at the very least restart the database.
>
> You don't have to restart the computer or the database when changes are
> made to pg_hba.conf- you just need to issue a "reload".
>
> Thanks,
>
> Stephen
>

--000000000000412d9b0599eddaf6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div><span style=3D"font-family:sans-serif;font-size:12.8=
px">=C2=A0&gt; I don&#39;t recommend doing so because it&#39;s very insecur=
e.</span><div dir=3D"auto"><span style=3D"font-family:sans-serif;font-size:=
12.8px">Sir, nothing is really secure.</span></div><div dir=3D"auto"><span =
style=3D"font-family:sans-serif;font-size:12.8px">There is at least one per=
son with full privileges.</span></div><div dir=3D"auto"><br></div><div dir=
=3D"auto"><br></div><div dir=3D"auto"><br></div><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Tue, 17 Dec 2019, 21:41 Stephen Fr=
ost, &lt;<a href=3D"mailto:[email protected]">[email protected]</a>&gt; w=
rote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex=
;border-left:1px #ccc solid;padding-left:1ex">Greetings,<br>
<br>
* Zahid Rahman (<a href=3D"mailto:[email protected]" target=3D"_blank" r=
el=3D"noreferrer">[email protected]</a>) wrote:<br>
&gt; You have to set to trust from peer the first time you download and ins=
tall<br>
&gt; postgres.<br>
&gt; Because there is no default password.<br>
&gt; After you create a password.<br>
&gt; Then you can reset from trust.<br>
<br>
No- peer auth allows the &quot;postgres&quot; unix user, which is the user =
that<br>
the database runs as, to connect.<br>
<br>
To do so, you would first &quot;sudo su - postgres&quot; and then run psql,=
 and<br>
then you&#39;ll be able to connect without any need for a password.=C2=A0 T=
his is<br>
exactly what &#39;peer&#39; auth is for and how it works and it&#39;s quite=
 secure.<br>
<br>
There&#39;s no need to ever change the authentication method to be &#39;tru=
st&#39;<br>
and I don&#39;t recommend doing so because it&#39;s very insecure.<br>
<br>
&gt; You also have to reboot your computer each time you change<br>
&gt; etc/postgresql/12/main/pg_hba.conf.<br>
&gt; at the very least restart the database.<br>
<br>
You don&#39;t have to restart the computer or the database when changes are=
<br>
made to pg_hba.conf- you just need to issue a &quot;reload&quot;.<br>
<br>
Thanks,<br>
<br>
Stephen<br>
</blockquote></div></div></div>

--000000000000412d9b0599eddaf6--