Received: from localhost (unknown [200.46.204.183])
	by developer.postgresql.org (Postfix) with ESMTP id D39EC2E009D
	for <pgsql-admin-postgresql.org@developer.postgresql.org>;
	Fri, 23 May 2008 13:43:47 -0300 (ADT)
Received: from developer.postgresql.org ([200.46.204.71])
	by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024)
	with ESMTP id 87178-06
	for <pgsql-admin-postgresql.org@developer.postgresql.org>;
	Fri, 23 May 2008 13:43:43 -0300 (ADT)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from smtp172.iad.emailsrvr.com (smtp172.iad.emailsrvr.com
	[207.97.245.172])
	by developer.postgresql.org (Postfix) with ESMTP id AE1672E0099
	for <pgsql-admin@postgresql.org>; Fri, 23 May 2008 13:43:44 -0300 (ADT)
Received: from relay7.relay.iad.mlsrvr.com (localhost [127.0.0.1])
	by relay7.relay.iad.mlsrvr.com (SMTP Server) with ESMTP id 21A731B4E13;
	Fri, 23 May 2008 12:43:39 -0400 (EDT)
Received: by relay7.relay.iad.mlsrvr.com (Authenticated sender:
	chander-AT-otg-nc.com) with ESMTP id E6CD91B4D88;
	Fri, 23 May 2008 12:43:38 -0400 (EDT)
Message-ID: <4836F43E.4050607@otg-nc.com>
Date: Fri, 23 May 2008 12:43:42 -0400
From: Chander Ganesan <chander@otg-nc.com>
User-Agent: Thunderbird 2.0.0.14 (Windows/20080421)
MIME-Version: 1.0
To: "Blakely, Jerel (Mission Systems)" <Jerel.Blakely@ngc.com>
CC: pgsql-admin@postgresql.org
Subject: Re: How do I force users to change their password?
References: <1D29F363FE21EC4CA017E256383990B41DE98C@XMBTX122.northgrum.com>
In-Reply-To: <1D29F363FE21EC4CA017E256383990B41DE98C@XMBTX122.northgrum.com>
Content-Type: multipart/alternative;
	boundary="------------000907040902070001070103"
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Archive-Number: 200805/199
X-Sequence-Number: 29283

This is a multi-part message in MIME format.
--------------000907040902070001070103
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Blakely, Jerel (Mission Systems) wrote:
>
> The only setting I see is an account expire, but I do not want to lock 
> the people out of the accounts.
> I just want to force each user to set a new password on minimum 
> intervals.
>
> Does Postgres have a way to require users to change their passwords 
> every 90 days for example, with out locking the account and forcing an 
> admin to go in and update it?
>
>
I think the best you could do would be to tie authentication into some 
external system that requires a password change after a specified 
interval.  This can be accomplished with LDAP, Kerberos, or PAM.  
However, I don't think that the native mechanism will allow you to do 
what you are trying to accomplish.

-- 
Chander Ganesan
Open Technology Group, Inc.
One Copley Parkway, Suite 210
Morrisville, NC  27560
919-463-0999/877-258-8987
http://www.otg-nc.com


--------------000907040902070001070103
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Blakely, Jerel (Mission Systems) wrote:
<blockquote
 cite="mid:1D29F363FE21EC4CA017E256383990B41DE98C@XMBTX122.northgrum.com"
 type="cite">
  <meta http-equiv="Content-Type" content="text/html; ">
  <meta name="Generator"
 content="MS Exchange Server version 6.5.7652.24">
  <title>How do I force users to change their password?</title>
<!-- Converted from text/rtf format -->
  <p><font face="Arial" size="2">The only setting I see is an account
expire, but I do not want to lock the people out of the accounts.</font>
  <br>
  <font face="Arial" size="2">I just want to force each user to set a
new password on minimum intervals.</font>
  </p>
  <p><font face="Arial" size="2">Does Postgres have a way to require
users to change their passwords every 90 days for example, with out
locking the account and forcing an admin to go in and update it?</font></p>
  <br>
</blockquote>
I think the best you could do would be to tie authentication into some
external system that requires a password change after a specified
interval.&nbsp; This can be accomplished with LDAP, Kerberos, or PAM.&nbsp;
However, I don't think that the native mechanism will allow you to do
what you are trying to accomplish.<br>
<pre class="moz-signature" cols="72">-- 
Chander Ganesan
Open Technology Group, Inc.
One Copley Parkway, Suite 210
Morrisville, NC  27560
919-463-0999/877-258-8987
<a class="moz-txt-link-freetext" href="http://www.otg-nc.com">http://www.otg-nc.com</a></pre>
</body>
</html>

--------------000907040902070001070103--