Re: Query on User account password change details

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Vipin Madhusoodanan <vipin(dot)madhusoodanan(at)gmail(dot)com>
Cc: "pgsql-admin(at)lists(dot)postgresql(dot)org" <pgsql-admin(at)lists(dot)postgresql(dot)org>
Subject: Re: Query on User account password change details
Date: 2021-05-06 20:10:43
Message-ID: 20210506201043.GA10431@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Thu, May 6, 2021 at 02:52:00PM -0500, Vipin Madhusoodanan wrote:
> Hi Team,
>
> Please advise on the possibilities to retrieve “last password change date”  for
> a PostgreSQL user account. We have an audit requirement to identify the
> password change details for local PostgreSQL user accounts. We are able to
> track AD users using AD Group Policy, but unable to fetch these details for
> local user accounts. Tried to explore pg_users and pg_shadow catalog views, but
> this information was not available. 

Yep, it's not available. If you are authenticating Postgres using AD,
you don't really change the password in Postgres, right? You can just
check the AD date. I don't think triggers work on system tables, so I
don't think that is an option.

--
Bruce Momjian <bruce(at)momjian(dot)us> https://momjian.us
EDB https://enterprisedb.com

If only the physical world exists, free will is an illusion.

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Holger Jakobs 2021-05-06 20:12:16 Re: Query on User account password change details
Previous Message Vipin Madhusoodanan 2021-05-06 19:52:00 Query on User account password change details