Postgresql Authentication method issue

Question

i wonder why postgres allows trust Authentication method as it allow any role to connect without providing a password!!

if any role change the pg_hba.conf to trust then the server will be unsecure and will open to any role with any password

i would like to prevent any connection to the server without providing the right password , so how can we prevent this ? is their any best practices follow in order to secure postgres server ?

harmic · Accepted Answer · 2014-05-27 11:49:48Z

2

As described in the manual, the postgresql daemon should be run as a separate user account which is not used for other purposes. The data directory and all the files in it should be owned by this user and permissions set so that only this user has access to it.

The initdb command which is used to initialise the database cluster will set it up like this.

If set up correctly, only the postgres user, or root, can edit pg_hba.conf.

The basic assumption behind the trust method is that the user is pre-authenticated by the environment. For example, if the database is not configured to listen on any external interface, and you are sure only authorised users can log into the server.

Section 19.3.1 describes in more detail the circumstances under which you might want to use the 'trust' method.

edited May 27, 2014 at 11:49

answered May 27, 2014 at 11:42

harmic

31k6 gold badges75 silver badges102 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

vyegorov · Accepted Answer · 2014-05-27 11:15:16Z

0

Check 19.3. Authentication Methods

answered May 27, 2014 at 11:15

vyegorov

23k7 gold badges61 silver badges76 bronze badges

2 Comments

Sameer H. Ibra Over a year ago

i know there is another authentication methods , but if anyone can edit the pg_hba.conf file and change it to trust then the server will be unsecure , so i want to prevent the change

klin Over a year ago

If anyone can edit the pg_hba.conf file, anyone can do anything with your server. It is up to administrator to make sure that nobody else has access to Postgres data folder.

Collectives™ on Stack Overflow

Postgresql Authentication method issue

2 Answers 2

Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related