Re: BUG #1271: Installation problems (cannot execute initd b.exe)

Rami,

there is not even a small chance that the admin-restriction will be
dropped within windows. All arguments have been discussed in detail,
and the decision has been made to not drop it by the very core
developers.

You do know of the "runas" command within XP? That helps you in
testing, you can "switch" the secuirity-context "on the fly"

I often use:

runas /user:postgres cmd

and
runas /user:Administrator cmd

giving me to command-windows with different security-contents.

Also have a look at the "work in progress" silent install within the
"dokumentation" section of pgfoundry.

For now I have posted (to be honest, in testing the "pgfoundry
publishing mechanism") a batchfile to do a "rather silent" install of
postgres. That batch has to be run with admin privs and should only
require the user to "click through" - maybe it works with your setup
(user postgres is created differentyl)

Harald

On Thu, 30 Sep 2004 09:16:00 +0100, Ramzi Fadel <raf@carlbro.dk> wrote:

Hi Magnus

I am 99% sure that the users I have tried with are not administrators. I
have added users that are not member of any groups and still they cannot
execute initdb after logging in.

I have earlier installed PostgreSQL but on other machines, and as I remember
it, I followed the same procedures, so I guess there is some Windows
security feature that is responsible.

Why not ommiting the administrator security on Windows builds?

Ramzi

-----Original Message-----
From: Magnus Hagander [mailto:mha@sollentuna.net]
Sent: Wednesday, September 29, 2004 12:20 PM
To: Ramzi Fadel; Harald Armin Massa
Subject: RE: [BUGS] BUG #1271: Installation problems (cannot execute
initdb.exe)

Please try the steps outlined in FAQ 3.3 at
http://pginstaller.projects.postgresql.org/FAQ_windows.html#3.3

//Magnus

-----Original Message-----
From: Ramzi Fadel [mailto:raf@CARLBRO.DK]
Sent: Wednesday, September 29, 2004 2:17 PM
To: 'Harald Armin Massa'; Magnus Hagander
Subject: RE: [BUGS] BUG #1271: Installation problems (cannot
execute initdb.exe)

Hi Harald and Magnus

Thanks for the quick reply.

I have tried to install again, but the problem is still that
initdb is not allowed to execute.

The steps taken are:
- Login with user "raf", who has admin privs
- During installation the service user is chosen to be
"postgres" (does not exsist prior to installation)
- The internal user is "postgis" (does not exsist prior to
installation)
- The files are copied and permissions are granted
- Finally initdb fails, the log file (initdb.log) contains
the following:

The files belonging to this database system will be owned by
user "postgres".
This user must also own the server process.

The database cluster will be initialized with locale C.

fixing permissions on existing directory C:/PGSQL80/data ...
ok creating directory C:/PGSQL80/data/global ... ok creating
directory C:/PGSQL80/data/pg_xlog ... ok creating directory
C:/PGSQL80/data/pg_xlog/archive_status ... ok creating
directory C:/PGSQL80/data/pg_clog ... ok creating directory
C:/PGSQL80/data/pg_subtrans ... ok creating directory
C:/PGSQL80/data/base ... ok creating directory
C:/PGSQL80/data/base/1 ... ok creating directory
C:/PGSQL80/data/pg_tblspc ... ok selecting default
max_connections ... 10 selecting default shared_buffers ...
50 creating configuration files ... ok creating template1
database in C:/PGSQL80/data/base/1 ... execution of
PostgreSQL by a user with administrative permissions is not permitted.
The server must be started under an unprivileged user ID to
prevent possible system security compromise. See the
documentation for more information on how to properly start
the server.
child process was terminated by signal 1
initdb: failed
initdb: removing contents of data directory "C:/PGSQL80/data"

-----Original Message-----
From: Harald Armin Massa [mailto:haraldarminmassa@gmail.com]
Sent: Wednesday, September 29, 2004 11:08 AM
To: Ramzi Fadel
Subject: Re: [BUGS] BUG #1271: Installation problems (cannot execute
initdb.exe)

Ramzi,

your output contains:

"""
PostgreSQL by a user with administrative permissions is not permitted.
The server must be started under an unprivileged user ID to
prevent possible system security compromise. See the
documentation for more information on how to properly start
the server.
child process was terminated by signal 1 """

that is a clear signal that the user you are using HAS
adminstrative permissions. (or the check for admin privs
within postgres has a bug, but that is rather unlikeley)

Normal way of installation.
- log in as a user with admin privs (at least "create
service", "create user" ," grant servicelogon right to user")
- allow the installer to create a postgres user with limited
privileges
- allow the installer to run initdb, install service and all
-------------------------------

there is never a need to log on as postgres-user "on your
own" with normal installation. (it is usefull sometimes in
debugging, but thats quite after the installstep)

Harald
--
GHUM Harald Massa
Harald Armin Massa
Reinsburgstraße 202b
70197 Stuttgart
0173/9409607

--
GHUM Harald Massa
Harald Armin Massa
Reinsburgstraße 202b
70197 Stuttgart
0173/9409607