The Three Musketeers (Authentication, Authorization, and Accounting)
summary
Applies the AAA model to Postgres with concrete knobs: use pg_settings to see which parameters need reload vs restart, edit postgresql.conf for SSL and set server.crt and server.key in PGDATA, and treat pg_hba.conf as authorization where line order decides allow or reject. Shows authentication methods (md5 peer ldap kerberos), role commands (CREATE ROLE, GRANT, REVOKE, ALTER DEFAULT PRIVILEGES), logging flags and tools for auditing like PGAudit, audit_trigger, and PGBadger for log analysis.
AI-written summary · about
chapters (15)
- 0:00Start
- 0:53AAA Model
- 3:48postgresql con Security and Authentication
- 8:01CREATE ROLE with LOGIN
- 10:42SSL - Overview
- 12:20SSL - Server File Usage
- 13:51Creating Sell Suned Certificates
- 17:57CREATE ROLE with NOLOGIN
- 19:03GRANT REVOKE
- 19:36GRANT - Example
- 19:54REVOKE - Example
- 21:28ALTER DEFAULT PRIVILEGES
- 22:05Access Privilege Inquiry Functions
- 25:12Importing clog
- 27:20Questions?
related talks
54mConfiguration and Authentication
48mAdvanced Authentication and Encrypted Connections
07mAll about Postgres security
22mFrom trust to Tokens: A Short History of PostgreSQL Authentication
50mSecuring PostgreSQL
40mPostgreSQL Security for Application Developers
35mSecuring PostgreSQL From External Attack
45mSecurity Attacks on PostgreSQL