Re: Roles with passwords; SET ROLE ... WITH PASSWORD ?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Michael Gould <mgould(at)intermodalsoftwaresolutions(dot)net>
Cc: Craig Ringer <craig(at)postnewspapers(dot)com(dot)au>, PG-General Mailing List <pgsql-general(at)postgresql(dot)org>
Subject: Re: Roles with passwords; SET ROLE ... WITH PASSWORD ?
Date: 2009-12-02 16:21:11
Message-ID: 14187.1259770871@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Michael Gould <mgould(at)intermodalsoftwaresolutions(dot)net> writes:
> One other topic that is related to this is that we now have a expire date
> but it would be nice to have a number of days also. This would make it easy
> to force the user to change their passwords every X days if internal
> security is being used instead of something like Kerberos or LDAP.

There's already a solution to that in CVS HEAD: you can add a plug-in
module to enforce password policy, including a limit on how far away the
expiration date is.

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Le-shin Wu 2009-12-02 16:25:03 Re: import data from openoffice Calc
Previous Message Daniel Verite 2009-12-02 16:20:43 Re: Large Objects and Replication question