Message-ID: <5e4ed7296493684b40a5fa7fb009edf92f5e9ade.camel@cybertec.at>
Subject: Re: Password authorization
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Mladen Gogala <gogala.mladen@gmail.com>, pgsql-admin@lists.postgresql.org
Date: Fri, 21 Jan 2022 15:18:50 +0100
In-Reply-To: <d4fd7ed1-5dd5-7a1b-0df1-5df80cc3f0cc@gmail.com>
References: 
	<CALfOM6KtjqpO5pYgmpUmDScJMeftv9r509HfYLo2b8gebviL3g@mail.gmail.com>
	 <f0455f10526a0463c9e99fc803b6e5ebfd518894.camel@cybertec.at>
	 <d4fd7ed1-5dd5-7a1b-0df1-5df80cc3f0cc@gmail.com>
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.40.4 (3.40.4-2.fc34) 
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Archived-At: 
 <https://www.postgresql.org/message-id/5e4ed7296493684b40a5fa7fb009edf92f5e9ade.camel%40cybertec.at>
Precedence: bulk

On Fri, 2022-01-21 at 09:10 -0500, Mladen Gogala wrote:
> On 1/20/22 09:25, Laurenz Albe wrote:
>  
> > It is not quite clear what you mean, but I assume you want password complexity rules,
> > and you want to force users to change their password after a while.
> > 
> > You cannot do any of that with passwords in the database; the best you can
> > do is set an expiration time for the user's ability to log in.

> Actually, you can. There is the standard "passwordcheck" module described in the documentation:
> https://www.postgresql.org/docs/current/passwordcheck.html
> You would have to do some C programming, but it's very possible.

That is no solution, because it cannot check hashed passwords
(except with cracklib).  I wrote it.

Laurenz Albe