Process won't start in Windows

Started by Robert Fitzpatrickabout 19 years ago8 messagesgeneral
Jump to latest
#1Robert Fitzpatrick
lists@webtent.net

I am running PostgreSQL 8.1.5 under Windows Server 2003 Standard
edition. All has been running for weeks now, don't know if it has been
restarted since we installed. Today we installed a program, Paradox
database, which required a restart, and now the PostgreSQL Server
service won't start with the Event description that the service cannot
start by a user with administrative permsissions:

Execution of PostgreSQL by a user with administrative permissions is not
permitted.
The server must be started under an unprivileged user ID to prevent
possible system security compromises. See the documentation for
more information on how to properly start the server.

I tried checking permissions on the data folder for the postgres user,
resetting the password, even re-created the user and reset perms on the
data and program files. Still won't start with the event error above.

What should I look for? I am used to running PostgreSQL on our BSD boxes
and have this setup for a customer.

--
Robert

#2Adam Rich
adam.r@sbcglobal.net
In reply to: Robert Fitzpatrick (#1)
Re: Process won't start in Windows

Robert,
Open "Computer Management" and find the postgres service.
There should be an item saying "Run As". You want that to be
a non-privledged account. Typically, postgres asks you what account
to use when you install it. Just make sure that account has not been
granted administrative rights (you can check that under Computer
Management as well)

-----Original Message-----
From: pgsql-general-owner@postgresql.org
[mailto:pgsql-general-owner@postgresql.org] On Behalf Of Robert
Fitzpatrick
Sent: Tuesday, January 16, 2007 7:04 PM
To: PostgreSQL
Subject: [GENERAL] Process won't start in Windows

I am running PostgreSQL 8.1.5 under Windows Server 2003 Standard
edition. All has been running for weeks now, don't know if it has been
restarted since we installed. Today we installed a program, Paradox
database, which required a restart, and now the PostgreSQL Server
service won't start with the Event description that the service cannot
start by a user with administrative permsissions:

Execution of PostgreSQL by a user with administrative permissions is not
permitted.
The server must be started under an unprivileged user ID to prevent
possible system security compromises. See the documentation for
more information on how to properly start the server.

I tried checking permissions on the data folder for the postgres user,
resetting the password, even re-created the user and reset perms on the
data and program files. Still won't start with the event error above.

What should I look for? I am used to running PostgreSQL on our BSD boxes
and have this setup for a customer.

--
Robert

---------------------------(end of broadcast)---------------------------
TIP 9: In versions below 8.0, the planner will ignore your desire to
choose an index scan if your joining column's datatypes do not
match

#3Abdul Hayee Bhatti
hayee.bhatti@gmail.com
In reply to: Adam Rich (#2)
Re: Process won't start in Windows

That -- and make sure your "Secondary Logon" service is running. Also, to
confirm, "Log On As" column in front of the pg service should mention the
postgres (low privileged) user.

A. Hayee

Show quoted text

On 1/17/07, Adam Rich <adam.r@sbcglobal.net> wrote:

Robert,
Open "Computer Management" and find the postgres service.
There should be an item saying "Run As". You want that to be
a non-privledged account. Typically, postgres asks you what account
to use when you install it. Just make sure that account has not been
granted administrative rights (you can check that under Computer
Management as well)

-----Original Message-----
From: pgsql-general-owner@postgresql.org
[mailto:pgsql-general-owner@postgresql.org] On Behalf Of Robert
Fitzpatrick
Sent: Tuesday, January 16, 2007 7:04 PM
To: PostgreSQL
Subject: [GENERAL] Process won't start in Windows

I am running PostgreSQL 8.1.5 under Windows Server 2003 Standard
edition. All has been running for weeks now, don't know if it has been
restarted since we installed. Today we installed a program, Paradox
database, which required a restart, and now the PostgreSQL Server
service won't start with the Event description that the service cannot
start by a user with administrative permsissions:

Execution of PostgreSQL by a user with administrative permissions is not
permitted.
The server must be started under an unprivileged user ID to prevent
possible system security compromises. See the documentation for
more information on how to properly start the server.

I tried checking permissions on the data folder for the postgres user,
resetting the password, even re-created the user and reset perms on the
data and program files. Still won't start with the event error above.

What should I look for? I am used to running PostgreSQL on our BSD boxes
and have this setup for a customer.

--
Robert

---------------------------(end of broadcast)---------------------------
TIP 9: In versions below 8.0, the planner will ignore your desire to
choose an index scan if your joining column's datatypes do not
match

---------------------------(end of broadcast)---------------------------
TIP 2: Don't 'kill -9' the postmaster

#4Magnus Hagander
magnus@hagander.net
In reply to: Abdul Hayee Bhatti (#3)
Re: Process won't start in Windows

That -- and make sure your "Secondary Logon" service is running. Also, to confirm, "Log On As" column in front of the pg service should mention the postgres

(low privileged) user.

Secondary logon service is only needed during installation. It's only used to launch initdb.

/Magnus

#5Robert Fitzpatrick
lists@webtent.net
In reply to: Adam Rich (#2)
Re: Process won't start in Windows

On Tue, 2007-01-16 at 20:00 -0600, Adam Rich wrote:

Robert,
Open "Computer Management" and find the postgres service.
There should be an item saying "Run As". You want that to be
a non-privledged account. Typically, postgres asks you what account
to use when you install it. Just make sure that account has not been
granted administrative rights (you can check that under Computer
Management as well)

Thanks, yes, I verified the services has 'postgres' as the account being
used under the Log On tab of the PostgreSQL service. But still, the
service will not start with the administrative permissions error
previously posted. Any other ideas?

--
Robert

In reply to: Robert Fitzpatrick (#5)
Re: Process won't start in Windows

Robert Fitzpatrick wrote:

Thanks, yes, I verified the services has 'postgres' as the account being
used under the Log On tab of the PostgreSQL service. But still, the
service will not start with the administrative permissions error
previously posted. Any other ideas?

Did you check that the "postgres" user is not part of the local
"Administrators" group?

Ray.

---------------------------------------------------------------
Raymond O'Donnell, Director of Music, Galway Cathedral, Ireland
rod@iol.ie
---------------------------------------------------------------

#7Dave Page
dpage@pgadmin.org
In reply to: Raymond O'Donnell (#6)
Re: Process won't start in Windows

Raymond O'Donnell wrote:

Robert Fitzpatrick wrote:

Thanks, yes, I verified the services has 'postgres' as the account being
used under the Log On tab of the PostgreSQL service. But still, the
service will not start with the administrative permissions error
previously posted. Any other ideas?

Did you check that the "postgres" user is not part of the local
"Administrators" group?

Or any other group it might have inherited admin rights from. the check
is recursive - if you have *any* admin right, no matter how many parent
groups they were inheirted form, it'll find them and refuse to run.

Regards, Dave

#8Robert Fitzpatrick
lists@webtent.net
In reply to: Dave Page (#7)
Re: Process won't start in Windows

On Wed, 2007-01-17 at 14:13 +0000, Dave Page wrote:

Raymond O'Donnell wrote:

Robert Fitzpatrick wrote:

Thanks, yes, I verified the services has 'postgres' as the account being
used under the Log On tab of the PostgreSQL service. But still, the
service will not start with the administrative permissions error
previously posted. Any other ideas?

Did you check that the "postgres" user is not part of the local
"Administrators" group?

Or any other group it might have inherited admin rights from. the check
is recursive - if you have *any* admin right, no matter how many parent
groups they were inheirted form, it'll find them and refuse to run.

The local administrators group has the Administrator, Domain Admins for
the domain, and one other user (not postgres). The postgres user is a
Member Of only the Users group.

--
Robert