pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Chander Ganesan <chander@otg-nc.com>
To: Blakely, Jerel (Mission Systems) <Jerel.Blakely@ngc.com>
Cc: pgsql-admin@postgresql.org
Subject: Re: How do I force users to change their password?
Date: Fri, 23 May 2008 12:43:42 -0400
Message-ID: <4836F43E.4050607@otg-nc.com> (raw)
In-Reply-To: <1D29F363FE21EC4CA017E256383990B41DE98C@XMBTX122.northgrum.com>
References: <1D29F363FE21EC4CA017E256383990B41DE98C@XMBTX122.northgrum.com>

Blakely, Jerel (Mission Systems) wrote:
>
> The only setting I see is an account expire, but I do not want to lock 
> the people out of the accounts.
> I just want to force each user to set a new password on minimum 
> intervals.
>
> Does Postgres have a way to require users to change their passwords 
> every 90 days for example, with out locking the account and forcing an 
> admin to go in and update it?
>
>
I think the best you could do would be to tie authentication into some 
external system that requires a password change after a specified 
interval.  This can be accomplished with LDAP, Kerberos, or PAM.  
However, I don't think that the native mechanism will allow you to do 
what you are trying to accomplish.

-- 
Chander Ganesan
Open Technology Group, Inc.
One Copley Parkway, Suite 210
Morrisville, NC  27560
919-463-0999/877-258-8987
http://www.otg-nc.com

view thread (2+ messages)

Message-ID: <4836F43E.4050607@otg-nc.com>
Permalink:  ../4836F43E.4050607@otg-nc.com/
Also on:    postgresql.org/message-id/4836F43E.4050607@otg-nc.com

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: chander@otg-nc.com, Jerel.Blakely@ngc.com
  Subject: Re: How do I force users to change their password?
  In-Reply-To: <4836F43E.4050607@otg-nc.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox