public inbox for [email protected]  

help / color / mirror / Atom feed

From: Teja Jakkidi <[email protected]>
To: pgsql-admin <[email protected]>
Subject: Credcheck max_auth_failure
Date: Wed, 8 Jan 2025 21:27:06 -0800
Message-ID: <[email protected]> (raw)

Hello Admins,

We are trying to setup password policies on open source Postgres 14 (on SUSE Linux) using credcheck on an instance that has got stand by setup on other server.
On primary, Installed the binaries, created the extension and enabled below parameter:
credcheck.max_auth_failure to 3;

1. The parameter is working as expected on primary and banning the id in the 3rd attempt with wrong password.
However, I am not able to figure out how to get the banned user back to working. Restarting instance will get the banned user working but restarting whole instance to activate one user is not a feasible solution.
2. The same parameter is not working on the stand by instance. Even after 3 failed attempts user is still active.

Please let me know if you are aware of any solutions.

Thanks,
J. Teja.

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: Credcheck max_auth_failure
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox