Received: from maia.hub.org (maia-2.hub.org [200.46.204.251]) by mail.postgresql.org (Postfix) with ESMTP id 517BF6326F2 for ; Thu, 5 Aug 2010 17:32:58 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.251]) (amavisd-maia, port 10024) with ESMTP id 06409-03 for ; Thu, 5 Aug 2010 20:32:50 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by mail.postgresql.org (Postfix) with ESMTP id C5AD0632400 for ; Thu, 5 Aug 2010 17:32:50 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id o75KWm2R029357; Thu, 5 Aug 2010 16:32:48 -0400 (EDT) To: "Mark Steben" cc: pgsql-admin@postgresql.org Subject: Re: password administration In-reply-to: <20100805200454.17A64632749@mail.postgresql.org> References: <20100805200454.17A64632749@mail.postgresql.org> Comments: In-reply-to "Mark Steben" message dated "Thu, 05 Aug 2010 15:58:06 -0400" Date: Thu, 05 Aug 2010 16:32:47 -0400 Message-ID: <29356.1281040367@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.91 tagged_above=-10 required=5 tests=BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: X-Archive-Number: 201008/31 X-Sequence-Number: 35280 "Mark Steben" writes: > I would like to set up a facility that enforces password changes for roles > After a predefined period (30 days for instance) when logging into psql > Or, at the very least, send an email out to notify that your current > Password period is about to expire. Usually we suggest using PAM when you want to do this, as there's all sorts of spare parts out there already for PAM-managed passwords. (I concur with the response questioning whether forced password changes are good policy, especially with an interval as short as that. But if you've got bullheaded management to deal with, PAM is the place to look.) regards, tom lane