Timeline for Possible to disable THE postgres role?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 26, 2021 at 10:57 | comment | added | RonJohn | What do they expect you to do? Create a new superuser account called "mysql"? Yes, actually (although they are gracious enough to let me choose the name). It's not as weird as you make it seem, since SQL Server allows it. | |
| Apr 26, 2021 at 10:55 | comment | added | RonJohn | Option #1 says "don't exist"; they want "not used". Unless I'm really dense on a Monday morning, I don't see how they are the same. | |
| Apr 26, 2021 at 8:02 | comment | added | Phill W. | So they really don't want a postgres account/role used anywhere? That's my Option #1 and, IMHO, you should push back hard on this because it's counter-productive and pointless. What do they expect you to do? Create a new superuser account called "mysql"? :-) If the Auditors really want to insist on this, then get them to tell you how to do it reliably, robustly and recoverably. Very few other people do this, so if you run into any difficulties with this, you're probably on your own! Not a Good Place to put yourself. | |
| Apr 23, 2021 at 14:57 | comment | added | RonJohn | I connect to the instance using peer auth after sudoing into the Linux postgres account. | |
| Apr 23, 2021 at 14:55 | comment | added | RonJohn | #2 is what they mean. Knowing about the SQL Server "sa" login, and how it can be disabled, even deleted after a new sysadmin login has been created and all references to "sa" have been replaced by that new login. They don't even want it used for " the internal operation of the PostgreSQL cluster". | |
| Apr 23, 2021 at 13:43 | history | answered | Phill W. | CC BY-SA 4.0 |