Re: Win32 Question about the right level for the account that PostgreSQL is installed under...

From: "Magnus Hagander" <mha(at)sollentuna(dot)net>
To: "Dann Corbit" <DCorbit(at)connx(dot)com>, "PostgreSQL-development" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Win32 Question about the right level for the account that PostgreSQL is installed under...
Date: 2004-09-02 08:43:43
Message-ID: 6BCB9D8A16AC4241919521715F4D8BCE475B9D@algol.sollentuna.se
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> Sorry to be such a pest. Since an administrator will get this error:
>
> creating template1 database in u:/msys/1.0/local/pgsql/data/base/1 ...
> execution of PostgreSQL by a user with administrative
> permissions is not permitted.
> The server must be started under an unprivileged user ID to
> prevent possible system security compromise. See the
> documentation for more information on how to properly start
> the server.
> child process was terminated by signal 1
> initdb.exe: failed
>
> What is the highest safe level to do the installation under Win32?

Must *not* be a member of the Administrators local group or any group
which nests into this group (this includes, of course, Domain Admins,
but may include other groups depending on your setup).
Must *not* be a member of the Power Users local group or any group which
nests into this group.

That's all we check.

Don't grant it unnecessary privileges either, but that's generally not
done by default in most setups. It needs log in as a service outside the
normal ones, but no others. If you run as service. Otherwise, just log
on locally for you to runas to it.

Yes, this needs to go intot he documentation :-(

//Magnus

Browse pgsql-hackers by date

  From Date Subject
Next Message Eyinagho Newton 2004-09-02 11:00:06 Thesis on PostgreSQL
Previous Message Fabien COELHO 2004-09-02 08:16:23 pgxs default installation + various fixes