From: Bruce Momjian <bruce@momjian.us>
To: Vipin Madhusoodanan <vipin.madhusoodanan@gmail.com>
Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Subject: Re: Query on User account password change details
Date: Thu, 6 May 2021 16:10:43 -0400
Message-ID: <20210506201043.GA10431@momjian.us> (raw)
In-Reply-To: <CAPOO3u4cxoCmJsXJaMHCLavecb-Bc77=qh=dfQN+bbYJ6gneWA@mail.gmail.com>
References: <CAPOO3u4cxoCmJsXJaMHCLavecb-Bc77=qh=dfQN+bbYJ6gneWA@mail.gmail.com>
On Thu, May 6, 2021 at 02:52:00PM -0500, Vipin Madhusoodanan wrote:
> Hi Team,
>
> Please advise on the possibilities to retrieve “last password change date” for
> a PostgreSQL user account. We have an audit requirement to identify the
> password change details for local PostgreSQL user accounts. We are able to
> track AD users using AD Group Policy, but unable to fetch these details for
> local user accounts. Tried to explore pg_users and pg_shadow catalog views, but
> this information was not available.
Yep, it's not available. If you are authenticating Postgres using AD,
you don't really change the password in Postgres, right? You can just
check the AD date. I don't think triggers work on system tables, so I
don't think that is an option.
--
Bruce Momjian <bruce@momjian.us> https://momjian.us
EDB https://enterprisedb.com
If only the physical world exists, free will is an illusion.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: bruce@momjian.us, vipin.madhusoodanan@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: Query on User account password change details
In-Reply-To: <20210506201043.GA10431@momjian.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox