Re: I'd love to know what the rest of this error message is.

On Mar 2, 2007, at 8:47 PM, Jan Muszynski wrote:

> On 2 Mar 2007 at 16:33, dlivesay@covad.net wrote:
>
>> Quoting Bill Moran <wmoran@potentialtech.com>:
>>
>>> In response to dlivesay@covad.net:
> <snip>
>>>> "Your local 'Administrators' group contains 'Authenticated Users'.
>>>> This is a common configuration error that causes security
>>>> issues. For this
>>>> reason, Postgr"
>>>>
> <snip>
>>>> Does anybody know what the rest of this message might be? Bonus
>>>> points if you
>>>> can explain what it means, and especially if you can explain
>>>> what to
>>>> do about
>>>> it.
>>>>
>>>> I suspect this is more a WIndows problem than a PostgreSQL
>>>> problem, but I'm
>>>> afraid I don't know that much about Windows. I'm a Mac/Unix kind of
>>>> guy, and I
>>>> try to avoid using WIndows whenever possible because this kind of
>>>> stuff always
>>>> happens.
>>>
>>> I don't know 100%, but it looks like the "authenticated users"
>>> group is a
>>> member of the "administrators" group.  This means that anyone who
>>> logs in
>>> to the workstation is an administrator.  It's a complete lack of
>>> security,
>>> but it's also very common (in my experience) for Windows
>>> workstations.
>>>
>>> I'm guessing that the PG installer is being anal and refusing to
>>> allow you
>>> to install on such a poorly configured system, but that part I
>>> don't know.
>>>
>>> My suggestion would be to fix the users/groups on the Windows
>>> system so there
>>> is a special administrative user, then remove authenticated users
>>> from the
>>> administrator group.
>>
>> When I saw this error I immediately went to the "Local Users and
>> Groups" control
>> panel to see if I could figure out what the heck it was talking
>> about, and I
>> swear there is no group called "Authenticated Users". That's
>> what's so
>> baffling
>> about this, apart from the incomplete error message.
>
> Authenticated users is a psuedogroup generated internally. You
> won't find
> it listed as a group perse, but if you go to the Administrators
> group and
> check it's membership you will see it listed there.

I checked that and didn't see it there.