Configuring the DBMS account for work with PostgreSQL and Postgres Pro

Expand all | Collapse all

Prerequisites

Before you assign rights to the DBMS account, perform the following actions:

1. Make sure that you log in to the system under the local administrator account.
2. Install an environment for working with PostgreSQL and Postgres Pro.
3. Configure the PostgreSQL or Postgres Pro server for working with Kaspersky Security Center Linux.

Configuring the DBMS accounts to install Administration Server

To configure the DBMS accounts for the Administration Server installation:

1. Run an environment for working with Postgres.
2. Log in under the Postgres user in the Postgres database.
3. Create a new Postgres role (in this example, the role is kscdbadmin):

   CREATE USER "kscdbadmin" WITH PASSWORD '<password>';

4. Create an Administration Server database (in this example, the Administration Server database name is kav):

   CREATE DATABASE "kav" ENCODING 'UTF8' OWNER "kscdbadmin";

   We recommend that you specify the Postgres role created at step 3 of this instruction as the database owner (in this example, the role is kscdbadmin).

   Specifying another user as the database owner

   If you need to specify another Postgres role, connect to the database under this owner (or superuser) role and run the following commands:

   GRANT ALL PRIVILEGES ON DATABASE "kav" TO "kscdbadmin";

   GRANT USAGE ON SCHEMA public TO "kscdbadmin";

   GRANT CREATE ON SCHEMA public TO "kscdbadmin";

   GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA "public" TO "kscdbadmin";

   GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA "public" TO "kscdbadmin";

   Ensure that the database owner role has the CONNECT and TEMPORARY privileges.

   If the error "New encoding (UTF8) is incompatible with the encoding of the template database" occurs, create a database by using the command:
   CREATE DATABASE "kav" ENCODING 'UTF8' OWNER "kscdbadmin" TEMPLATE template0;
   instead of:
   CREATE DATABASE "kav" ENCODING 'UTF8' OWNER "kscdbadmin";

5. Create a new Postgres role for IAM (in this example, the Postgres role is iamdbadmin):

   CREATE USER "iamdbadmin" WITH PASSWORD '<password>';

6. Create an IAM database (in this example, the IAM database name is iam):

   CREATE DATABASE "iam" ENCODING 'UTF8' OWNER "iamdbadmin";

   We recommend that you specify the Postgres role created at step 5 of this instruction as the database owner (in this example, the role is iamdbadmin).

   Specifying another user as the IAM database owner

   If you need to specify another Postgres role, connect to the database under this owner (or superuser) role and run the following commands:

   GRANT ALL PRIVILEGES ON DATABASE "iam" TO "iamdbadmin";

   GRANT USAGE ON SCHEMA public TO "iamdbadmin";

   GRANT CREATE ON SCHEMA public TO "iamdbadmin";

   GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA "public" TO "iamdbadmin";

   GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA "public" TO "iamdbadmin";

   Ensure that the database owner role has the CONNECT and TEMPORARY privileges.

   If the error "New encoding (UTF8) is incompatible with the encoding of the template database" occurs, create a database by using the command:
   CREATE DATABASE "iam" ENCODING 'UTF8' OWNER "iamdbadmin" TEMPLATE template0;
   instead of:
   CREATE DATABASE "iam" ENCODING 'UTF8' OWNER "iamdbadmin";

   The Administration Server does not remove the IAM database automatically when uninstalling or moving the server to another device, you must remove the database manually.

7. Install Administration Server.

After the installation finishes, the Administration Server will use the created database to store the Administration Server data. Administration Server is ready to use.

Page top