pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedChange password
2+ messages / 2 participants
[nested] [flat]
* Change password
@ 2020-02-26 01:33 Venkat jumbo <venkatpostgresql@gmail.com>
0 siblings, 1 reply; 2+ messages in thread
From: Venkat jumbo @ 2020-02-26 01:33 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Hi all,
Can we force the user to changepassword every month /days. (passwordexpired
)
Do we have this option in postgres-10 ?
--
Thanks,
Venkatesulu J.D.
https://venkatjd.blogspot.in
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: Change password
@ 2020-02-26 06:16 Tom Lane <tgl@sss.pgh.pa.us>
parent: Venkat jumbo <venkatpostgresql@gmail.com>
0 siblings, 0 replies; 2+ messages in thread
From: Tom Lane @ 2020-02-26 06:16 UTC (permalink / raw)
To: Venkat jumbo <venkatpostgresql@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Venkat jumbo <venkatpostgresql@gmail.com> writes:
> Can we force the user to changepassword every month /days. (passwordexpired
> )
> Do we have this option in postgres-10 ?
Postgres doesn't do that directly, though there is a provision for
setting an expiration date on a password. If you want rules like
that, you might look at using PAM auth and then coding the rules
with PAM modules.
FWIW, forced password changes are widely considered to be poor
security practice these days. Before you bull ahead with this,
you might read a few experts, for example
https://www.ftc.gov/news-events/blogs/techftc/2016/03/time-rethink-mandatory-password-changes
https://www.sans.org/security-awareness-training/blog/time-password-expiration-die
https://www.extremetech.com/computing/292534-microsoft-says-forced-password-resets-dont-improve-secu...
https://www.schneier.com/blog/archives/2016/08/frequent_passwo.html
regards, tom lane
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2020-02-26 06:16 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2020-02-26 01:33 Change password Venkat jumbo <venkatpostgresql@gmail.com>
2020-02-26 06:16 ` Tom Lane <tgl@sss.pgh.pa.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox