3 ms·

How much configuration changes do we have access to behind the scenes? Any chance the pg_hba.conf is available to the owner? Similarly, do we have access to cre

by abstrct 12y ago

How much configuration changes do we have access to behind the scenes? Any chance the pg_hba.conf is available to the owner? Similarly, do we have access to create additional roles/users?

pjlegato 12y ago
Hi, Database Labs founder here. You get superuser access to the Postgres server, so administratively you can do anything at all that can be done from an interactive psql session - create/delete/update databases, roles/users, privileges, and so on. We don't currently have any way for end users to tweak pg_hba.conf or other backend config files. We open up port 5432 for SSL-encrypted connections from psql or any other Postgres-compatible software. Does that cover the cases where you'd want to modify pg_hba.conf?
- abstrct 12y ago
  Nice to hear about superuser. That's great. Unfortunately it doesn't sound like it will cover my use-case, but admittedly my scenario is a weird one (see http://schemaverse.com http://schemaverse.com). Either way, thanks for the response and best of luck with the service!
  - pjlegato 12y ago
    Er. Wow, that's a pretty awesome idea! You can create and update user roles without altering pg_hba.conf, which I think would let you run most of that. What's the case where you'd need to alter pg_hba.conf directly?
    - abstrct 12y ago
      Thanks! Come try it out sometime :D You clearly have an equal love for postgres. I asked because we have been considering ways for people to easily deploy their own instance of the game (likely for educational purposes). So I try to keep an eye open for new db services. The technical reason for the requirement is that players connect from all over but the system also needs to be able to connect as each player - preferably without knowing their password. We normally handle this with a trust relationship between specific servers. Alternatively we could be using a superuser account and SET ROLE but that would require some other changes as well.

by abstrct 12y ago

How much configuration changes do we have access to behind the scenes? Any chance the pg_hba.conf is available to the owner? Similarly, do we have access to create additional roles/users?

pjlegato 12y ago

Hi, Database Labs founder here. You get superuser access to the Postgres server, so administratively you can do anything at all that can be done from an interactive psql session - create/delete/update databases, roles/users, privileges, and so on. We don't currently have any way for end users to tweak pg_hba.conf or other backend config files. We open up port 5432 for SSL-encrypted connections from psql or any other Postgres-compatible software. Does that cover the cases where you'd want to modify pg_hba.conf?

abstrct 12y ago
Nice to hear about superuser. That's great. Unfortunately it doesn't sound like it will cover my use-case, but admittedly my scenario is a weird one (see http://schemaverse.com http://schemaverse.com). Either way, thanks for the response and best of luck with the service!
- pjlegato 12y ago
  Er. Wow, that's a pretty awesome idea! You can create and update user roles without altering pg_hba.conf, which I think would let you run most of that. What's the case where you'd need to alter pg_hba.conf directly?
  - abstrct 12y ago
    Thanks! Come try it out sometime :D You clearly have an equal love for postgres. I asked because we have been considering ways for people to easily deploy their own instance of the game (likely for educational purposes). So I try to keep an eye open for new db services. The technical reason for the requirement is that players connect from all over but the system also needs to be able to connect as each player - preferably without knowing their password. We normally handle this with a trust relationship between specific servers. Alternatively we could be using a superuser account and SET ROLE but that would require some other changes as well.