From: Tom Lane <tgl@sss.pgh.pa.us>
To: "David G. Johnston" <david.g.johnston@gmail.com>
cc: Sbob <sbob@quadratum-braccas.com>,
        Pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: query to show locked / disabled users?
In-reply-to: 
 <CAKFQuwYZAtVfSokLgqCevemAeVAVayFdssdOTDnb8SSerM7mVQ@mail.gmail.com>
References: <ca089c15-4691-1081-5e6f-3b522c657869@quadratum-braccas.com>
 <CAKFQuwYZAtVfSokLgqCevemAeVAVayFdssdOTDnb8SSerM7mVQ@mail.gmail.com>
Comments: In-reply-to "David G. Johnston" <david.g.johnston@gmail.com>
	message dated "Thu, 14 Apr 2022 12:24:17 -0700"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <1537963.1649964882.1@sss.pgh.pa.us>
Date: Thu, 14 Apr 2022 15:34:42 -0400
Message-ID: <1537964.1649964882@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/1537964.1649964882%40sss.pgh.pa.us>
Precedence: bulk

"David G. Johnston" <david.g.johnston@gmail.com> writes:
> On Thursday, April 14, 2022, Sbob <sbob@quadratum-braccas.com> wrote:
>> I have a client that says there were break in attempts and many db users
>> are now disabled / locked because of too many wrong pw attempts. Is there
>> a select that will show these users?

>  You can look at pg_roles.

That probably won't help much, because Postgres has no built-in
mechanism for disabling users on the basis of "too many wrong pw
attempts".  Whatever has decided that must be external to Postgres
(perhaps getting accessed via LDAP or PAM?) and you're going to have
to look at its state.  In short, there's not enough info here for
us to offer any useful advice.

			regards, tom lane