From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Daulat <daulat.dba@gmail.com>
To: pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: Password complexities in Postgres v14.6
Date: Fri, 16 Dec 2022 15:55:09 +0100
Message-ID: <2192ed923b577ce4a8a90479c7ed1c97f7a6523d.camel@cybertec.at> (raw)
In-Reply-To: <CALfOM6LjVBhpHg+6nVe6reOBYdPJZXvXhkp+dqquG9cVBsGPmQ@mail.gmail.com>
References: <CALfOM6LjVBhpHg+6nVe6reOBYdPJZXvXhkp+dqquG9cVBsGPmQ@mail.gmail.com>
On Fri, 2022-12-16 at 17:57 +0530, Daulat wrote:
> Any idea, how we can set some Password complexities in postgres for user password. Like, we can create profiles in Oracle.
> I am looking to set the Password complexities (one parameter from each line item has to be complied to):
> Default password age for users: 90 days.
> Password first letter will be alphabetic in uppercase.
> English uppercase characters (A through Z)
> English lowercase characters (a through z)
> Base 10 digits (0 through 9)
> Non-alphabetic characters ~" &_-+='! (){}[):;"'<>,.?/ !@#$%*
> Password Minimum Length 8 character
There is no reliable way to do this in PostgreSQL, since the server typically
never sees the clear text password.
You should consider using one of the other authentication methods like "ldap"
and enforce the policy on the LDAP server.
Yours,
Laurenz Albe
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: laurenz.albe@cybertec.at, daulat.dba@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: Password complexities in Postgres v14.6
In-Reply-To: <2192ed923b577ce4a8a90479c7ed1c97f7a6523d.camel@cybertec.at>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox