pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedConfiguration questions
5+ messages / 5 participants
[nested] [flat]
* Configuration questions
@ 2010-04-05 20:11 Kevin Crain <kevin.crain1@gmail.com>
0 siblings, 2 replies; 5+ messages in thread
From: Kevin Crain @ 2010-04-05 20:11 UTC (permalink / raw)
To: pgsql-admin
How do I configure postgres to lock a user's account after X failed login
attempts, where X is an arbitrary number.
Also is there a way to limit the number of concurrent connections on a per
account basis?
-Kevin
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Configuration questions
@ 2010-04-06 18:45 Francisco Reyes <lists@stringsutils.com>
parent: Kevin Crain <kevin.crain1@gmail.com>
1 sibling, 2 replies; 5+ messages in thread
From: Francisco Reyes @ 2010-04-06 18:45 UTC (permalink / raw)
To: Kevin Crain <kevin.crain1@gmail.com>; +Cc: pgsql-admin
Kevin Crain writes:
> How do I configure postgres to lock a user's account after X failed login
> attempts, where X is an arbitrary number.
Don't think there is a way to do that.
Perhaps using an authentication mechanism that supports that and then using
it to connect to Postgres..
This page may be of interest:
http://www.postgresql.org/docs/current/static/auth-methods.html
> Also is there a way to limit the number of concurrent connections on a per
> account basis?
Don't think there is an option for that either.
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Configuration questions
@ 2010-04-06 19:19 Milen A. Radev <milen@radev.net>
parent: Kevin Crain <kevin.crain1@gmail.com>
1 sibling, 0 replies; 5+ messages in thread
From: Milen A. Radev @ 2010-04-06 19:19 UTC (permalink / raw)
To: pgsql-admin
На 05.4.2010 23:11, Kevin Crain написа:
[...]
> Also is there a way to limit the number of concurrent connections on a per
> account basis?
ALTER ROLE <role> CONNECTION LIMIT <number>;
(http://www.postgresql.org/docs/current/static/sql-alterrole.html)
--
Milen A. Radev
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Configuration questions
@ 2010-04-06 19:52 Tom Lane <tgl@sss.pgh.pa.us>
parent: Francisco Reyes <lists@stringsutils.com>
1 sibling, 0 replies; 5+ messages in thread
From: Tom Lane @ 2010-04-06 19:52 UTC (permalink / raw)
To: Francisco Reyes <lists@stringsutils.com>; +Cc: Kevin Crain <kevin.crain1@gmail.com>; pgsql-admin
Francisco Reyes <lists@stringsutils.com> writes:
> Kevin Crain writes:
>> How do I configure postgres to lock a user's account after X failed login
>> attempts, where X is an arbitrary number.
> Don't think there is a way to do that.
> Perhaps using an authentication mechanism that supports that and then using
> it to connect to Postgres..
The usual suggestion is to use PAM if you want a customized login
policy.
regards, tom lane
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Configuration questions
@ 2010-04-06 20:23 Guillaume Lelarge <guillaume@lelarge.info>
parent: Francisco Reyes <lists@stringsutils.com>
1 sibling, 0 replies; 5+ messages in thread
From: Guillaume Lelarge @ 2010-04-06 20:23 UTC (permalink / raw)
To: Francisco Reyes <lists@stringsutils.com>; +Cc: Kevin Crain <kevin.crain1@gmail.com>; pgsql-admin
Le 06/04/2010 20:45, Francisco Reyes a écrit :
> Kevin Crain writes:
>
>> How do I configure postgres to lock a user's account after X failed
>> login attempts, where X is an arbitrary number.
>
> Don't think there is a way to do that.
> Perhaps using an authentication mechanism that supports that and then
> using it to connect to Postgres..
> This page may be of interest:
> http://www.postgresql.org/docs/current/static/auth-methods.html
>
Yeah, an external authentication tool can probably do that. The internal
ones (password, md5, and crypt) won't.
>> Also is there a way to limit the number of concurrent connections on a
>> per account basis?
>
> Don't think there is an option for that either.
>
Sure, there is one:
ALTER ROLE your-user WITH CONNECTION LIMIT x;
See http://www.postgresql.org/docs/8.4/interactive/sql-alterrole.html
for more details.
--
Guillaume.
http://www.postgresqlfr.org
http://dalibo.com
^ permalink raw reply [nested|flat] 5+ messages in thread
end of thread, other threads:[~2010-04-06 20:23 UTC | newest]
Thread overview: 5+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2010-04-05 20:11 Configuration questions Kevin Crain <kevin.crain1@gmail.com>
2010-04-06 18:45 ` Francisco Reyes <lists@stringsutils.com>
2010-04-06 19:52 ` Tom Lane <tgl@sss.pgh.pa.us>
2010-04-06 20:23 ` Guillaume Lelarge <guillaume@lelarge.info>
2010-04-06 19:19 ` Milen A. Radev <milen@radev.net>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox