From: Tom Lane <tgl@sss.pgh.pa.us>
To: Mark Steben <msteben@autorevenue.com>
Cc: pgsql-admin@postgresql.org
Subject: Re: password administration
Date: Thu, 05 Aug 2010 16:32:47 -0400
Message-ID: <29356.1281040367@sss.pgh.pa.us> (raw)
In-Reply-To: <20100805200454.17A64632749@mail.postgresql.org>
References: <20100805200454.17A64632749@mail.postgresql.org>
"Mark Steben" <msteben@autorevenue.com> writes:
> I would like to set up a facility that enforces password changes for roles
> After a predefined period (30 days for instance) when logging into psql
> Or, at the very least, send an email out to notify that your current
> Password period is about to expire.
Usually we suggest using PAM when you want to do this, as there's all
sorts of spare parts out there already for PAM-managed passwords.
(I concur with the response questioning whether forced password changes
are good policy, especially with an interval as short as that. But if
you've got bullheaded management to deal with, PAM is the place to
look.)
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: tgl@sss.pgh.pa.us, msteben@autorevenue.com
Subject: Re: password administration
In-Reply-To: <29356.1281040367@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox