Re: [ADMIN] pgcrypto and database encryption

2004-03-07 Thread matt
> Does the law require protection from a determined DBA, or just casual > viewing by the DBA? *If* it's the latter, you could do something like > this: The EU directive (and therefore the laws of indiviual countries) requires that if someone gets access to your *DATABASE* they cannot get personal

Re: [ADMIN] How to do fast, reliable backups?

2004-03-07 Thread Chris Ruprecht
On Saturday, Mar 6, 2004, at 08:39 US/Eastern, Silvana Di Martino wrote: Making a copy of your data directory while your server is running is definitely a bad idea. Forget it. Backing up the file system used by a RDBMS usually requires to put the server off-line and flush all the unwritten data t

[ADMIN] running pg_dumpall as superuser fails

2004-03-07 Thread Josh
Hello, I am trying to figure out how to get pg_dumpall to work.  My ultimate goal is to get this running as a cron to backup the DBs nightly. By the way, I am running PostgreSQL 7.2.4 on redhat 7.3. My problem is with authentication. I think it ultimately has to do with my pg_hba.conf file.

Re: [ADMIN] pgcrypto and database encryption

2004-03-07 Thread Joe Conway
Silvana Di Martino wrote: 4) What could actually solve our problem is something like the following scenario. Imagine that postmaster (or pg_ctrl) could accept a new CL parameter called "pw". This parameter would contain a sequence of comma-separated databasename/encryption-password pairs. I mean

Re: [ADMIN] pgcrypto and database encryption

2004-03-07 Thread Stephan Szabo
On Sun, 7 Mar 2004, Silvana Di Martino wrote: > 3) This means that you have to manage by yourself all the details of the > password one-time entry at the RDBMS start-up time, its storing (in RAM, > only) and its passage to the SQL SELECTs. IMHO, this is still far to satisfy > our need for a stand

Re: [ADMIN] CREATE USER system privilege?

2004-03-07 Thread Oli Sennhauser
Hi admins Long ago I was asking about system privilege "create user" and procedures to create users without superuser rights. Now I have finished some pgplsql-Procedures for granting this rights to a normal operator. You can find them on http://mypage.bluewin.ch/shinguz/PostgreSQL/skripts/f_cr

Re: [ADMIN] ERServer on Windows?

2004-03-07 Thread Andrew Sullivan
On Sun, Mar 07, 2004 at 06:54:54PM +0800, Chen Shaopeng wrote: > Has anyone gotten ERServer (the async replication server) work on > Windows and would like to share some ideas? Not as far as I know. In principle, it should work: the whole thing except for the setup scripts is written in Java. Yo

Re: [ADMIN] How to do fast, reliable backups?

2004-03-07 Thread Andrew Sullivan
On Sun, Mar 07, 2004 at 08:54:07AM +, Silvana Di Martino wrote: > > Of course, that's right. Nevertheless, it is hard to imagine anything better > than master-slave replication as a backup/recovery mechanism. For example, > how more data would you loose during a file system copy? This actua

[ADMIN] pgcrypto and database encryption

2004-03-07 Thread Silvana Di Martino
Going on with my evaluation of pgcrypto as a possible solution for our (EU) privacy law problems, I have to report the following facts: 1) pgcrypto (understandably) supplies just a small collections of server-side functions, not a general-purpose database-encryption system. 2) This means that

Re: [ADMIN] OT: Database Encryption (now required by law in Italy)

2004-03-07 Thread Mitch Pirtle
Silvana Di Martino wrote: Regarding this topic I have a dream: the hyerarchical permission architecture of OS/400 (and many other IBM OSs for mainframe) ported to Linux. Just imagine this: you have a omnipotent "root" who can access the machine from the console only, a whole set of powerful, co

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-07 Thread Silvana Di Martino
Alle 17:24, sabato 6 marzo 2004, Gorshkov ha scritto: > When you connect to amazon.com from italy, my understanding is that you're > (legally) conducting business in the USA, because that's where the > transaction actually takes place - that's where the servers are. Well, there are two different