Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nAYNa-0004qe-R9 for pgsql-admin@arkaria.postgresql.org; Thu, 20 Jan 2022 14:25:34 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1nAYNZ-0007dF-IS for pgsql-admin@arkaria.postgresql.org; Thu, 20 Jan 2022 14:25:33 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nAYNZ-0007d6-8R for pgsql-admin@lists.postgresql.org; Thu, 20 Jan 2022 14:25:33 +0000 Received: from mail-wm1-x335.google.com ([2a00:1450:4864:20::335]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1nAYNT-0008Qs-JH for pgsql-admin@lists.postgresql.org; Thu, 20 Jan 2022 14:25:32 +0000 Received: by mail-wm1-x335.google.com with SMTP id az27-20020a05600c601b00b0034d2956eb04so14104710wmb.5 for ; Thu, 20 Jan 2022 06:25:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cybertec-at.20210112.gappssmtp.com; s=20210112; h=message-id:subject:from:to:date:in-reply-to:references:user-agent :mime-version:content-transfer-encoding; bh=NsxGqcybtg7XkjqrfctUtkC00UMGOJEAClOxb8St7/I=; b=CS/5TSp5tpL1sKs1sXKePXhK2ElmZaO/qah3/zKRq8zkdk5Bbf0LCnMt2Stj51A34E nAqplcZ7pYasfufFDZkesGOHhCguqGrpGyZ356z2CR5sH0JoMw9FRGK/wXQ7Uh7wDebM 25QZ1B/sQl8jxGVz0HXt94cHW0RHYboItbR7oh8A8mInAmorSleefdS7l16nJgghBtLr itswTXLVIDOWHHCdAtj8scksJ4u/oOh8Q7Hflxjf1oVDWwR3GUu+FRcGUat8MPT/baN4 KXo77WkUFAZZPAt9B8UrKuLVsiEhfsTNgi7UPrLTzwxSTwXh0krl1wLVNJuMbhEw+77A /YpQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:subject:from:to:date:in-reply-to :references:user-agent:mime-version:content-transfer-encoding; bh=NsxGqcybtg7XkjqrfctUtkC00UMGOJEAClOxb8St7/I=; b=igwt0Kgu3/1W6OpoJQV/pBC3mhLHstPtJNkz1ZQFixewBOZTH7N8TSx9/vlsyho6mH +nporE6Wl6V0kVmqY1xB0zduNjyjlVhMPiwt+8wt47Xhp8elwKRqAHMLbo6GuMl9a70x CAfkQNL5mvBG0JmhHqLMHQtIaXRZFJszjE8FUC4i2dPbV/A8nmkysWqIqWJBbxlJ7MZn vQfB+Uq0AgNRs/JdQOW0udRTbOJgXpd/OrXQGpvlBO7EXGZfWR11CC/IIBayj8m6ytsy 7WRSdSMRsHBInOBi2wcv+AKPBmHnHSxLbkti65O38zJAlDprsh55jV70hHGYhCTylja8 6Reg== X-Gm-Message-State: AOAM533nz4TMA0TP7ht/H02o6mAEzva3JJv2cRRvYkWDnxv2Tf63yq/y Eu+IfdA2GMzQQWSp7h6qrfbRqg== X-Google-Smtp-Source: ABdhPJxDLE4brcsdKhSekeYHxe+18ggD+dXtwDUYoBP5BjBbk/q+Tmn/2K2tcZUTc6XiOte+7GShsQ== X-Received: by 2002:adf:fb07:: with SMTP id c7mr33603247wrr.608.1642688726197; Thu, 20 Jan 2022 06:25:26 -0800 (PST) Received: from localhost.localdomain (dynamic-ea5n5tajl6ogytbhy-pd01.res.v6.highway.a1.net. [2001:871:5e:5d9:76b9:dc22:8b26:8176]) by smtp.gmail.com with ESMTPSA id u14sm3485439wrs.17.2022.01.20.06.25.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 20 Jan 2022 06:25:25 -0800 (PST) Message-ID: Subject: Re: Password authorization From: Laurenz Albe To: Daulat , pgsql-admin Date: Thu, 20 Jan 2022 15:25:24 +0100 In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.40.4 (3.40.4-2.fc34) MIME-Version: 1.0 Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Thu, 2022-01-20 at 15:26 +0530, Daulat wrote: > Do we have any facility for password authorisation in Postgres same as in Oracle? > In Oracle, a user can change their password based upon the profile setting. What about in Postgres ?  > > Is there any alternative in postgres to manage the user password authorisation?  > What about LDAP with respect to this approach? > Please suggest. It is not quite clear what you mean, but I assume you want password complexity rules, and you want to force users to change their password after a while. You cannot do any of that with passwords in the database; the best you can do is set an expiration time for the user's ability to log in. With requirements as this, you should look into external password authentication like Kerberos or LDAP - you'll have to look at that server's documentation for more. Yours, Laurenz Albe -- Cybertec | https://www.cybertec-postgresql.com