cbbrowne at ca.afilias.info cbbrowne
Tue Nov 1 13:53:10 PST 2005
> Hi,
>
> Another question :
> The command "ps aux" displays the passord of my database user "slony" :
>
> slony    25628  0.0  2.1  14984  1356 pts/0    S+   13:48   0:00 slon
> slony_example dbname=pgbench user=slony password=*my_password*
>
> Is there a mean to prevent this ?!
> With this information, any local user is able to connect to as a
> postgresql superuser ! Very bad...

This has been documented for quite a long time in the FAQ...

http://linuxfinances.info/info/faq.html#AEN41927

That recommends using $HOME/.pgpass to store authentication information.

The alternative is to store the password in a slon config file, and have
slon use the "-f" option to read that config file.

I'd bias to using .pgpass; that's useful for more than just Slony-I...



More information about the Slony1-general mailing list