Search Postgresql Archives

Re: createuser: How to specify a database to connect to

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> -----Ursprüngliche Nachricht-----
> Von: Adrian Klaver [mailto:adrian.klaver@xxxxxxxxxxx]
> Gesendet: Montag, 13. März 2017 17:28
> An: Tom Lane
> Cc: Schmid Andreas; 'pgsql-general@xxxxxxxxxxxxxx'
> Betreff: Re:  createuser: How to specify a database to connect to
> 
> On 03/13/2017 09:19 AM, Tom Lane wrote:
> > Adrian Klaver <adrian.klaver@xxxxxxxxxxx> writes:
> >> On 03/13/2017 08:52 AM, Tom Lane wrote:
> >>> If by "history" you're worried about the server-side statement log, this
> >>> is merest fantasy: the createuser program is not magic, it just constructs
> >>> and sends a CREATE USER command for you.  You'd actually be more secure
> >>> using psql, where (if you're superuser) you could shut off log_statement
> >>> for your session first.
> >
> >> There is a difference though:
> >
> >> psql> CREATE USER:
> >
> >> postgres-2017-03-13 09:03:27.147 PDT-0LOG:  statement: create user
> >> dummy_user with login password '1234';
> >
> > Well, what you're supposed to do is
> >
> > postgres=# create user dummy_user;
> > postgres=# \password dummy_user
> > Enter new password:
> > Enter it again:
> > postgres=#
> >
> > which will result in sending something like
> >
> > ALTER USER dummy_user PASSWORD 'md5c5e9567bc40082671d02c654260e0e09'
> >
> > You can additionally protect that by wrapping it into one transaction
> > (if you have a setup where the momentary existence of the role without a
> > password would be problematic) and/or shutting off logging beforehand.
> 
> Got it.
> 
> >
> > 			regards, tom lane
> >
> 
> 
> --
> Adrian Klaver
> adrian.klaver@xxxxxxxxxxx


Got it, too.
I actually was worried about the .psql_history.
So my command for adding a new user is going to be

echo 'CREATE USER dummy_user; \password dummy_user' | psql -h my.host.name dbname myusername

(I like the one liners.)

Thanks a lot to all of you for pointing out these different solutions. Great to know that even if we apparently configured it in an unreasonable way, PostgreSQL still allows me to achieve what I want...

Best wishes,
Andreas



-- 
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux