Re: Minimising windows installer password confusion

From: Craig Ringer <craig(at)postnewspapers(dot)com(dot)au>
To: Sachin Srivastava <sachin(dot)srivastava(at)enterprisedb(dot)com>
Cc: Dave Page <dpage(at)pgadmin(dot)org>, Robert Haas <robertmhaas(at)gmail(dot)com>, Magnus Hagander <magnus(at)hagander(dot)net>, Kevin Grittner <Kevin(dot)Grittner(at)wicourts(dot)gov>, ashesh(dot)vashi(at)enterprisedb(dot)com, dharmendra(dot)goyal(at)enterprisedb(dot)com, pgsql-hackers(at)postgresql(dot)org
Subject: Re: Minimising windows installer password confusion
Date: 2012-06-13 02:07:36
Message-ID: 4FD7F5E8.10109@postnewspapers.com.au
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 06/13/2012 01:19 AM, Sachin Srivastava wrote:
>
> On Tue, Jun 12, 2012 at 7:43 PM, Dave Page <dpage(at)pgadmin(dot)org
> <mailto:dpage(at)pgadmin(dot)org>> wrote:
>
> On Tue, Jun 12, 2012 at 2:57 PM, Robert Haas <robertmhaas(at)gmail(dot)com
> <mailto:robertmhaas(at)gmail(dot)com>> wrote:

> > What we need is to display a different dialogue based on the
> situation.
> >
> > If the account already exists, we should say "Please enter the
> > password for the existing postgres account. If you do not know the
> > password, you can reset it using the Windows control panel."

Why "using the windows control panel" ?

They're running an installer with the rights to create/alter/delete
users. Shouldn't the installer just offer to reset the "postgres"
password, after warning them that it'll break other versions of
PostgreSQL and tools like PgAgent?

IMO, it'd be better for the installer to just take care of this behind
the scenes. Generate a random password. Store it in the registry in a
key that only the services manager ( SYSTEM account? ) and local
administrators can read. Use it in subsequent installs. Make the
"postgres" database password completely unrelated to it.

--
Craig Ringer

POST Newspapers
276 Onslow Rd, Shenton Park
Ph: 08 9381 3088 Fax: 08 9388 2258
ABN: 50 008 917 717
http://www.postnewspapers.com.au/

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2012-06-13 02:07:44 Re: [COMMITTERS] pgsql: Mark JSON error detail messages for translation.
Previous Message Robert Haas 2012-06-13 02:06:22 Re: 9.3: load path to mitigate load penalty for checksums