dblink_connect_u(3) [centos man page]

DBLINK_CONNECT_U(3)					  PostgreSQL 9.2.7 Documentation				       DBLINK_CONNECT_U(3)

NAME

       dblink_connect_u - opens a persistent connection to a remote database, insecurely

SYNOPSIS

       dblink_connect_u(text connstr) returns text
       dblink_connect_u(text connname, text connstr) returns text

DESCRIPTION

       dblink_connect_u() is identical to dblink_connect(), except that it will allow non-superusers to connect using any authentication method.

       If the remote server selects an authentication method that does not involve a password, then impersonation and subsequent escalation of
       privileges can occur, because the session will appear to have originated from the user as which the local PostgreSQL server runs. Also,
       even if the remote server does demand a password, it is possible for the password to be supplied from the server environment, such as a
       ~/.pgpass file belonging to the server's user. This opens not only a risk of impersonation, but the possibility of exposing a password to
       an untrustworthy remote server. Therefore, dblink_connect_u() is initially installed with all privileges revoked from PUBLIC, making it
       un-callable except by superusers. In some situations it may be appropriate to grant EXECUTE permission for dblink_connect_u() to specific
       users who are considered trustworthy, but this should be done with care. It is also recommended that any ~/.pgpass file belonging to the
       server's user not contain any records specifying a wildcard host name.

       For further details see dblink_connect().

PostgreSQL 9.2.7						    2014-02-17						       DBLINK_CONNECT_U(3)

DROPUSER(1)						  PostgreSQL Client Applications					       DROPUSER(1)

NAME

       dropuser - remove a PostgreSQL user account

SYNOPSIS

       dropuser [ option... ]  [ username ]

DESCRIPTION

       dropuser  removes  an  existing	PostgreSQL user.  Only superusers and users with the CREATEROLE privilege can remove PostgreSQL users. (To
       remove a superuser, you must yourself be a superuser.)

       dropuser is a wrapper around the SQL command DROP ROLE [drop_role(7)].  There is no effective difference between dropping  users  via  this
       utility and via other methods for accessing the server.

OPTIONS

       dropuser accepts the following command-line arguments:

       username
	      Specifies the name of the PostgreSQL user to be removed.	You will be prompted for a name if none is specified on the command line.

       -e

       --echo Echo the commands that dropuser generates and sends to the server.

       -i

       --interactive
	      Prompt for confirmation before actually removing the user.

       dropuser also accepts the following command-line arguments for connection parameters:

       -h host

       --host host
	      Specifies the host name of the machine on which the server is running. If the value begins with a slash, it is used as the directory
	      for the Unix domain socket.

       -p port

       --port port
	      Specifies the TCP port or local Unix domain socket file extension on which the server is listening for connections.

       -U username

       --username username
	      User name to connect as (not the user name to drop).

       -w

       --no-password
	      Never issue a password prompt. If the server requires password authentication and a password is not available by other means such as
	      a  .pgpass  file,  the connection attempt will fail. This option can be useful in batch jobs and scripts where no user is present to
	      enter a password.

       -W

       --password
	      Force dropuser to prompt for a password before connecting to a database.

	      This option is never essential, since dropuser will automatically prompt for a password if the server demands  password  authentica-
	      tion.   However,	dropuser  will waste a connection attempt finding out that the server wants a password.  In some cases it is worth
	      typing -W to avoid the extra connection attempt.

ENVIRONMENT

       PGHOST

       PGPORT

       PGUSER Default connection parameters

       This utility, like most other PostgreSQL utilities, also uses the environment variables supported by libpq (see in the documentation).

DIAGNOSTICS

       In case of difficulty, see DROP ROLE [drop_role(7)] and psql(1) for discussions of potential problems and  error  messages.   The  database
       server  must  be  running at the targeted host. Also, any default connection settings and environment variables used by the libpq front-end
       library will apply.

EXAMPLES

       To remove user joe from the default database server:

       $ dropuser joe

       To remove user joe using the server on host eden, port 5000, with verification and a peek at the underlying command:

       $ dropuser -p 5000 -h eden -i -e joe
       Role "joe" will be permanently removed.
       Are you sure? (y/n) y
       DROP ROLE joe;

SEE ALSO

       createuser(1), DROP ROLE [drop_role(7)]

Application							    2010-05-14							       DROPUSER(1)