Re: password administration

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Mark Steben" <msteben(at)autorevenue(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: password administration
Date: 2010-08-05 20:32:47
Message-ID: 29356.1281040367@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

"Mark Steben" <msteben(at)autorevenue(dot)com> writes:
> I would like to set up a facility that enforces password changes for roles
> After a predefined period (30 days for instance) when logging into psql
> Or, at the very least, send an email out to notify that your current
> Password period is about to expire.

Usually we suggest using PAM when you want to do this, as there's all
sorts of spare parts out there already for PAM-managed passwords.

(I concur with the response questioning whether forced password changes
are good policy, especially with an interval as short as that. But if
you've got bullheaded management to deal with, PAM is the place to
look.)

regards, tom lane

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Scott Marlowe 2010-08-05 20:54:23 Re: password administration
Previous Message Scott Marlowe 2010-08-05 20:27:46 Re: password administration