From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id KNrFI1rP3V5IBwAA0tVLHw (envelope-from ) for ; Mon, 08 Jun 2020 05:40:42 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id yBWtH1rP3V4CbgAAB5/wlQ (envelope-from ) for ; Mon, 08 Jun 2020 05:40:42 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id E8DDD940985 for ; Mon, 8 Jun 2020 05:40:41 +0000 (UTC) Received: from localhost ([::1]:40170 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jiAWV-0003GW-7o for larch@yhetil.org; Mon, 08 Jun 2020 01:40:39 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:57808) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jiAWM-0003Fc-SF for help-guix@gnu.org; Mon, 08 Jun 2020 01:40:30 -0400 Received: from mail-ej1-x644.google.com ([2a00:1450:4864:20::644]:35791) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jiAWK-0007Jo-Nl for help-guix@gnu.org; Mon, 08 Jun 2020 01:40:30 -0400 Received: by mail-ej1-x644.google.com with SMTP id y13so16824513eju.2 for ; Sun, 07 Jun 2020 22:40:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=Keas4JJhxNVRaHuTPhVcG44F6IBY6km2knXHKjul1mU=; b=gAvHvv3mnnFSIm37eunSdIzu5z79LsX88dwjleVoAUBebuW/WQWVi7+0k8zEeGZgrf IVLPtFG/nWxyK2juVxlw0u44waZlduO6LBdSZPAhAg+0eC5dDCnGS+c3InhUx7G5UEa9 E6R//5MGqmRgJ9y9bIK0in9D32s6bp728D9Bq8yFgT5999uePQAJOOAA+C6H8CxNkcG1 M5dusP9DuJ0poRK+JvSsfy8+XZndLp2JiPFFlY0m+YkoV5JGuvdkWujOrEnhg4ZGj/ab QD/F/Nzhh+u8mZ3KZnmXqVik7PahYlwf1Y6uLjjl5Nu6NGFnXXOazPzDziT8VY7Lbd83 yJGw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=Keas4JJhxNVRaHuTPhVcG44F6IBY6km2knXHKjul1mU=; b=G8L55cmkaB6kbfFNJgD+7sdcUk+ZZGmtBF/r1AiRhWbXRrhsslQ6eDQxn+aID2XXla 8GuymM0v4n289Z643FUfjzwAoFldgXBPuBRQWja3QUOZhHB0B5zRibjRmuy0sz96+ddf 5n2bBex7fhSD7ZF2TCxcGG97vW/t435Z+4GzK6UcY4hLblcA0fVgBnVhPOgKhPDYyzf+ i+801W98cgnaveBYiMR+Wj9IwKRbZQSqAuq1mGKTuwrxP1psj8Tzm7/Bt9MuCDlO5Mji g6eeMwdzmKaLE1F7tFpWKbwzL3gkgDj7p49toGGKk0svRB0RAIMs5CyGZpKNyBp1F/FB JfIQ== X-Gm-Message-State: AOAM532MmcZlPxmaBwtQTfF7CNVVwWnG1VX4qRmqzy4Ct+tN5Jqf9Ugh wvs1S72xatLDBtJUnDPYbzsfIt3baxnK61v8Wg== X-Google-Smtp-Source: ABdhPJx4GwxFPP3Br/7ZIpFYxF/x0dSV/e+ZlsZD5bCKJyub190e2J6CRWd1CZWPwE/TGbYreRe12febfreU3GTH0FI= X-Received: by 2002:a17:906:6453:: with SMTP id l19mr10063294ejn.262.1591594826527; Sun, 07 Jun 2020 22:40:26 -0700 (PDT) MIME-Version: 1.0 References: <87o8qeiu8f.fsf@ambrevar.xyz> In-Reply-To: <87o8qeiu8f.fsf@ambrevar.xyz> From: =?UTF-8?Q?G=C3=A1bor_Boskovits?= Date: Mon, 8 Jun 2020 07:40:15 +0200 Message-ID: Subject: Re: Doc bug: Postgres account not available To: Pierre Neidhardt Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2a00:1450:4864:20::644; envelope-from=boskovits@gmail.com; helo=mail-ej1-x644.google.com X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=fail (rsa verify failed) header.d=gmail.com header.s=20161025 header.b=gAvHvv3m; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Spam-Score: 0.09 X-TUID: INVGt7rzcTR+ Hello Pierre, This has been this way for a while. It took me some time to find it out also. I guess that documenting it would be fine. Most of the times I finally end up adding a shell to the account, but keeping it this way is a sane default when you automanage your database. Pierre Neidhardt ezt =C3=ADrta (id=C5=91pont: 2020. m= =C3=A1j. 23., Szo, 16:47): > > Hi! > > Apparently our Postgres service changed a little bit recently. While it > was easy to setup in the past, this week it cost me a few hours, trying > to figure out how to do a simple thing like > > --8<---------------cut here---------------start------------->8--- > $ psql -U postgres > psql: FATAL: Peer authentication failed for user "postgres" > --8<---------------cut here---------------end--------------->8--- > > Eventually, I discovered https://issues.guix.info/38198. > Turns out the authentication policy is now "peer" and the shell-less > 'postgres' user cannot be used without a shell. > > As such, to administrate PostgresQL we need first to switch to the > postgres user as follows: > > --8<---------------cut here---------------start------------->8--- > sudo su postgres -s psql > --8<---------------cut here---------------end--------------->8--- > > This was not a very obvious find on the Internet. > Can we make this easier? The above thread suggests to leave the setup > as is and to document it. > > Thoughts? G=C3=A1bor, Giovanni? > > -- > Pierre Neidhardt > https://ambrevar.xyz/ Best regards, g_bor --=20 OpenPGP Key Fingerprint: 7988:3B9F:7D6A:4DBF:3719:0367:2506:A96C:CF63:0B21