Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nAVPj-0005K7-Nq for pgsql-admin@arkaria.postgresql.org; Thu, 20 Jan 2022 11:15:35 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1nAVPi-00039T-MH for pgsql-admin@arkaria.postgresql.org; Thu, 20 Jan 2022 11:15:34 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nAVPi-00039K-B1 for pgsql-admin@lists.postgresql.org; Thu, 20 Jan 2022 11:15:34 +0000 Received: from jakobs.com ([85.214.83.89] helo=rs.plausibolo.de) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nAVPf-0003PT-Tc for pgsql-admin@lists.postgresql.org; Thu, 20 Jan 2022 11:15:34 +0000 Received: from localhost (localhost [127.0.0.1]) by rs.plausibolo.de (Postfix) with ESMTP id 052F8380592; Thu, 20 Jan 2022 12:15:30 +0100 (CET) Received: from rs.plausibolo.de ([IPv6:::1]) by localhost (h2367442.stratoserver.net [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id jHYmfLVONe5h; Thu, 20 Jan 2022 12:15:29 +0100 (CET) Received: from [192.168.178.197] (ip-037-201-154-229.um10.pools.vodafone-ip.de [37.201.154.229]) by rs.plausibolo.de (Postfix) with ESMTPSA id 7160138044E; Thu, 20 Jan 2022 12:15:29 +0100 (CET) Message-ID: <83fe005e-df7b-94fe-c861-6e432c8814da@jakobs.com> Date: Thu, 20 Jan 2022 12:15:28 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.3.2 Subject: Re: Password authorization Content-Language: de-DE To: Daulat Cc: pgsql-admin References: From: Holger Jakobs In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------6xLdgz4k029bCT08BjLjH9Rw" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------6xLdgz4k029bCT08BjLjH9Rw Content-Type: multipart/mixed; boundary="------------QHftqCPIqZkvY60iT0XXSl84"; protected-headers="v1" From: Holger Jakobs To: Daulat Cc: pgsql-admin Message-ID: <83fe005e-df7b-94fe-c861-6e432c8814da@jakobs.com> Subject: Re: Password authorization References: In-Reply-To: --------------QHftqCPIqZkvY60iT0XXSl84 Content-Type: multipart/alternative; boundary="------------KbM0WKI5QN1ohPOrYhIvjwf9" --------------KbM0WKI5QN1ohPOrYhIvjwf9 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 QW0gMjAuMDEuMjIgdW0gMTI6MTEgc2NocmllYiBEYXVsYXQ6DQo+IEhpIEhvbGdlciwNCj4N Cj4gSXMgdGhlcmUgYW55IGNoYW5nZSByZWxhdGVkIHRvIHBhc3N3b3JkIG1hbmFnZW1lbnQg aW4gUG9zdGdyZXMxNCB3aXRoIA0KPiByZXNwZWN0IHRvIHByZXZpb3VzIHJlbGVhc2VzLiBJ IGRvbid0IHNlZSBhbnl0aGluZyBuZXcuDQo+DQo+IFRoYW5rcw0KPg0KPiBPbiBUaHUsIEph biAyMCwgMjAyMiBhdCAzOjM2IFBNIEhvbGdlciBKYWtvYnMgPGhvbGdlckBqYWtvYnMuY29t PiB3cm90ZToNCj4NCj4gICAgIEFtIDIwLjAxLjIyIHVtIDEwOjU2IHNjaHJpZWIgRGF1bGF0 Og0KPiAgICAgPiBIaSBUZWFtLA0KPiAgICAgPg0KPiAgICAgPiBEbyB3ZSBoYXZlIGFueSBm YWNpbGl0ecKgZm9yIHBhc3N3b3JkIGF1dGhvcmlzYXRpb24gaW4gUG9zdGdyZXMNCj4gICAg IHNhbWUgYXMNCj4gICAgID4gaW4gT3JhY2xlPw0KPiAgICAgPiBJbiBPcmFjbGUsIGEgdXNl ciBjYW4gY2hhbmdlIHRoZWlyIHBhc3N3b3JkIGJhc2VkIHVwb24gdGhlDQo+ICAgICA+IHBy b2ZpbGXCoHNldHRpbmcuIFdoYXQgYWJvdXQgaW4gUG9zdGdyZXMgPw0KPiAgICAgPg0KPiAg ICAgPiBJcyB0aGVyZSBhbnkgYWx0ZXJuYXRpdmUgaW4gcG9zdGdyZXMgdG8gbWFuYWdlIHRo ZSB1c2VyIHBhc3N3b3JkDQo+ICAgICA+IGF1dGhvcmlzYXRpb24/DQo+ICAgICA+IFdoYXQg YWJvdXQgTERBUCB3aXRoIHJlc3BlY3QgdG8gdGhpcyBhcHByb2FjaD8NCj4gICAgID4gUGxl YXNlIHN1Z2dlc3QuDQo+ICAgICA+DQo+ICAgICA+IFRoYW5rcy4NCj4gICAgID4NCj4gICAg ID4NCj4NCj4gICAgIGh0dHBzOi8vd3d3LnBvc3RncmVzcWwub3JnL2RvY3MvMTQvc3FsLWFs dGVycm9sZS5odG1sIGNvbnRhaW5zIHRoZQ0KPiAgICAgc2VudGVuY2U6DQo+DQo+ICAgICDC oMKgwqDCoCBPcmRpbmFyeSByb2xlcyBjYW4gb25seSBjaGFuZ2UgdGhlaXIgb3duIHBhc3N3 b3JkLg0KPg0KPg0KPg0KDQpZZXMsIHRoZXJlIGlzLiBUaGUgZGVmYXVsdCBwYXNzd29yZCBo YXNoaW5nIG1ldGhvZCBoYXMgY2hhbmdlZCBpbiANCnBvc3RncmVzcWwuY29uZjoNCg0KVmVy c2lvbiAxMzoNCiNwYXNzd29yZF9lbmNyeXB0aW9uID0gbWQ1wqDCoMKgIMKgwqDCoCAjIG1k NSBvciBzY3JhbS1zaGEtMjU2DQoNClZlcnNpb24gMTQ6DQojcGFzc3dvcmRfZW5jcnlwdGlv biA9IHNjcmFtLXNoYS0yNTbCoMKgwqAgIyBzY3JhbS1zaGEtMjU2IG9yIG1kNQ0KDQotLSAN CkhvbGdlciBKYWtvYnMsIEJlcmdpc2NoIEdsYWRiYWNoLCBUZWwuICs0OS0xNzgtOTc1OTAx Mg0KDQo= --------------KbM0WKI5QN1ohPOrYhIvjwf9 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Am 20.01.22 um 12:11 schrieb Daulat:
Hi Holger,

Is there any change related to password management in Postgres14 with respect to previous releases. I don't see anything new.

Thanks

On Thu, Jan 20, 2022 at 3:3= 6 PM Holger Jakobs <holg= er@jakobs.com> wrote:
= Am 20.01.22 um 10:56 schrieb Daulat:
> Hi Team,
>
> Do we have any facility=C2=A0for password authorisation in= Postgres same as
> in Oracle?
> In Oracle, a user can change their password based upon the
> profile=C2=A0setting. What about in Postgres ?
>
> Is there any alternative in postgres to manage the user password
> authorisation?
> What about LDAP with respect to this approach?
> Please suggest.
>
> Thanks.
>
>

https://www.postgresql.org/do= cs/14/sql-alterrole.html contains the sentence:

=C2=A0=C2=A0=C2=A0=C2=A0 Ordinary roles can only change their o= wn password.




Yes, there is. The default password hashing method has changed in postgresql.conf:

Version 13:
#password_encryption =3D md5=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0 #= md5 or scram-sha-256

Version 14:
#password_encryption =3D scram-sha-256=C2=A0=C2=A0=C2=A0 # scram-sh= a-256 or md5

--=20
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012
--------------KbM0WKI5QN1ohPOrYhIvjwf9-- --------------QHftqCPIqZkvY60iT0XXSl84-- --------------6xLdgz4k029bCT08BjLjH9Rw Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wmMEABEIACMWIQScuJCxWJK1p5BOebGKV5yTsxlhugUCYelEUAUDAAAAAAAKCRCKV5yTsxlhutw3 AJ4zj11kC4bhWqD+iTj44unPHXCoEQCfSipCectSZqqWKnOflr6V1er0UT4= =y86f -----END PGP SIGNATURE----- --------------6xLdgz4k029bCT08BjLjH9Rw--