[check_postgres] Super user role

Norman Wong Norman.Wong at cn.ca
Mon Oct 19 13:01:27 UTC 2020


We are running only on supported versions of Postgresql Community edition (so 9.6+).

I did a quick and dirty update to the perl code and hardcoded a 'SET ROLE' before each command.  It works without problem.  I am able to run all the checks requiring Super User access without a Altering the monitoring role.

Thanks for you quick response.

Norm


-----Original Message-----
From: David Christensen <david at endpoint.com> 
Sent: Sunday, October 18, 2020 1:08 PM
To: Norman Wong <Norman.Wong at cn.ca>
Cc: check_postgres at bucardo.org
Subject: Re: [check_postgres] Super user role

Hi Norman,

You’re envisioning something which if set just does a `SET ROLE …` after making the connection but before running the individual checks? This does not seem like it would be very hard given a `psql` >= 9.5, as we could add the additional commands to the generated `psql` commands.

Supporting versions earlier than this would be quite a bit harder.  Would that support your needs or do you have older databases than 9.5?  (If 9.5 is in fact the cutoff for support, I’m fine with adding new features that would support all supported PostgreSQL versions.)

Best,

David
--
David Christensen
Senior Software and Database Engineer
End Point Corporation
david at endpoint.com
785-727-1171


> On Oct 15, 2020, at 1:29 PM, Norman Wong <Norman.Wong at cn.ca> wrote:
> 
> Thanks for producing this great module.  I’d like to suggest a small addition.
> 
> In our organization we do not grant superuser to any login roles.  There is a group role with superuser authority.  Superuser privilege cannot be inherited.  The login roles in this group must explicitly set the role to the superuser group to elevate their privileges.
> 
> There are a number of checks within check_postgres.pl that require superuser privilege.  Would it be possible to have a parameter where we can pass the superuser group role (e.g. –role )?
> 
> Thanks,
> 
> 
> Norman Wong, BMath, FLMI, RRCP Certified Specialist Database, IT 
> Technology & Infrastructure for Db2, Postgresql, Hana DB, and Versant 
> Management | Information Technology
> T: 514-399-7264 | C: 514-206-2258
> Celebrating 100 years | Célébrons nos 100 ans
> 
> 
> _______________________________________________
> Check_postgres mailing list
> Check_postgres at bucardo.org
> https://bucardo.org/mailman/listinfo/check_postgres



More information about the Check_postgres mailing list