Re: Doubts regarding postgres Security

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: PAWAN SHARMA <er(dot)pawanshr0963(at)gmail(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Doubts regarding postgres Security
Date: 2017-01-21 21:37:55
Message-ID: 20170121213755.GX18360@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Pawan,

Please be sure to include the mailing list on replies, so others can
benefit from the discussion. Also, please reply in-line, as I do below,
instead of top-posting.

* PAWAN SHARMA (er(dot)pawanshr0963(at)gmail(dot)com) wrote:
> So, there is no solution for my first question, we need if users enter the
> wrong password more than 5 times than their account gets locked and then
> only DBA will unlock this account.

I understood the question and there is an answer- use PAM.

The other option is to not use password-based authentication with PG and
instead use a better method such as certificate-based auth or GSSAPI.

Thanks!

Stephen

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Thomas Kellerer 2017-01-21 22:57:02 Re: PgPool or alternatives
Previous Message Simon Windsor 2017-01-21 20:26:21 Re: PgPool or alternatives