From: | "Goli, Vijay" <Vijay(dot)Goli(at)marsh(dot)com> |
---|---|
To: | "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org> |
Subject: | Request to Enforce the password Strength for PostgreSQL Databases |
Date: | 2018-01-03 14:53:27 |
Message-ID: | b08ee2c1b548467799d93527fe623321@USDFW11XG30CN04.mercer.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Hi Team,
In Marsh we have the PostgreSQL Databases 9.5.6 version. As per my review of the postgresql direct site & some of the blogs , I see the default limits are below:
* minimum 8 characters
* password cannot contain username
* it must contain at least 1 letter and and least 1 non-letter
As per our Organization standards, we need to have the below limitations:
1. Password length should be minimum of 15 characters.
2. Password should contain at least one digit, one upper and lower case character and one punctuation.
3. New Password should differ by atleast 3 characters.
Can you please help if we can modify the content in "passwordcheck.dll" lib if possible to set the above standards and how? Also, if the current PostgreSQL DB 9.5.6 version does not have feasibility and is there any future versions which contains these changes?
I see using "cracklib" we can modify the parameters in the "passwordcheck.dll". Can you please help how we can implement this ?
Referenced URLS:
https://www.depesz.com/2009/12/17/waiting-for-8-5-checking-password-strength/<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.depesz.com%2F2009%2F12%2F17%2Fwaiting-for-8-5-checking-password-strength%2F&data=02%7C01%7CIan.McDean%40exari.com%7C20f6c67f92d94696519b08d5423b8da2%7C5b48c5176ccd4496bee080bdb9bacab0%7C1%7C0%7C636487745907814253&sdata=mzJDIaB0JCVyHLHHhHTwIJp43amAg%2FKct1FwZc29NAc%3D&reserved=0>
https://www.postgresql.org/docs/current/static/passwordcheck.html<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.postgresql.org%2Fdocs%2Fcurrent%2Fstatic%2Fpasswordcheck.html&data=02%7C01%7CIan.McDean%40exari.com%7C20f6c67f92d94696519b08d5423b8da2%7C5b48c5176ccd4496bee080bdb9bacab0%7C1%7C0%7C636487745907814253&sdata=mVL4W5vHFB5Mv4VUpYjt65NQ%2B4ol9bVS5AL7vdSTltY%3D&reserved=0>
Thanks for your support in advance.
Thanks.
Regards,
Vijay Goli, Shared Services - DBA- North America<https://sharepoint.mrshmc.com/sites/ts1/gsd/GSD%20Organization%20Charts/Global%20GSD/Overview%20of%20Marsh%20IT%20Service%20Delivery%20for%20North%20America.pptx>
Marsh | Global IT & Operations | Global Service Delivery
121 River St, Hoboken, NJ 07030, USA
Phone: +(201)-284-6221 | Mobile: + (201)-595-9779 | vijay(dot)goli(at)marsh(dot)com<mailto:vijay(dot)goli(at)marsh(dot)com>
www.marsh.com<http://www.marsh.com/>
________________________________
**********************************************************************
This e-mail, including any attachments that accompany it, may contain
information that is confidential or privileged. This e-mail is
intended solely for the use of the individual(s) to whom it was intended to be
addressed. If you have received this e-mail and are not an intended recipient,
any disclosure, distribution, copying or other use or
retention of this email or information contained within it are prohibited.
If you have received this email in error, please immediately
reply to the sender via e-mail and also permanently
delete all copies of the original message together with any of its attachments
from your computer or device.
**********************************************************************
From | Date | Subject | |
---|---|---|---|
Next Message | Steve Atkins | 2018-01-03 17:53:32 | Re: Mailing list archiver |
Previous Message | Michelle Konzack | 2018-01-03 14:15:57 | Re: Mailing list archiver |