Re: [HACKERS] USER Profiles for PostgreSQL

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Stephen Frost <sfrost(at)snowman(dot)net>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, chiru r <chirupg(at)gmail(dot)com>, Forums postgresql <pgsql-general(at)postgresql(dot)org>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: [HACKERS] USER Profiles for PostgreSQL
Date: 2017-09-19 19:09:16
Message-ID: 20170919190916.GF18066@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-hackers

On Tue, Sep 19, 2017 at 01:28:11PM -0400, Stephen Frost wrote:
> Tom,
>
> * Tom Lane (tgl(at)sss(dot)pgh(dot)pa(dot)us) wrote:
> > chiru r <chirupg(at)gmail(dot)com> writes:
> > > We are looking for User profiles in ope source PostgreSQL.
> > > For example, If a user password failed n+ times while login ,the user
> > > access has to be blocked few seconds.
> > > Please let us know, is there any plan to implement user profiles in feature
> > > releases?.
> >
> > Not particularly. You can do that sort of thing already via PAM,
> > for example.
>
> Ugh, hardly and it's hokey and a huge pain to do, and only works on
> platforms that have PAM.
>
> Better is to use an external authentication system (Kerberos, for
> example) which can deal with this, but I do think this is also something
> we should be considering for core, especially now that we've got a
> reasonable password-based authentication method with SCRAM.

Does LDAP do this too?

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ As you are, so once was I. As I am, so you will be. +
+ Ancient Roman grave inscription +

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2017-09-19 19:20:21 Re: pgcrypto encrypt
Previous Message Dipesh Dangol 2017-09-19 18:38:44 Re: [HACKERS] pgjdbc logical replication client throwing exception

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2017-09-19 19:11:14 Re: type cache for concat functions
Previous Message David G. Johnston 2017-09-19 18:59:59 Re: issue: record or row variable cannot be part of multiple-item INTO list