Message-ID: <2192ed923b577ce4a8a90479c7ed1c97f7a6523d.camel@cybertec.at>
Subject: Re: Password complexities in Postgres v14.6
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Daulat <daulat.dba@gmail.com>, pgsql-admin
	 <pgsql-admin@lists.postgresql.org>
Date: Fri, 16 Dec 2022 15:55:09 +0100
In-Reply-To: 
 <CALfOM6LjVBhpHg+6nVe6reOBYdPJZXvXhkp+dqquG9cVBsGPmQ@mail.gmail.com>
References: 
	<CALfOM6LjVBhpHg+6nVe6reOBYdPJZXvXhkp+dqquG9cVBsGPmQ@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.42.4 (3.42.4-2.fc35) 
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Archived-At: 
 <https://www.postgresql.org/message-id/2192ed923b577ce4a8a90479c7ed1c97f7a6523d.camel%40cybertec.at>
Precedence: bulk

On Fri, 2022-12-16 at 17:57 +0530, Daulat wrote:
> Any idea, how we can set some Password complexities in postgres for user password. Like, we can create profiles in Oracle. 
> I am looking to set the Password complexities  (one parameter from each line item has to be complied to):
> Default password age for users: 90 days. 
> Password first letter will be alphabetic in uppercase.
> English uppercase characters (A through Z)
> English lowercase characters (a through z)
> Base 10 digits (0 through 9)
> Non-alphabetic characters ~" &_-+='! (){}[):;"'<>,.?/ !@#$%*
> Password Minimum Length 8 character

There is no reliable way to do this in PostgreSQL, since the server typically
never sees the clear text password.
You should consider using one of the other authentication methods like "ldap"
and enforce the policy on the LDAP server.

Yours,
Laurenz Albe