Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s6u3b-002NXp-GP for pgsql-general@arkaria.postgresql.org; Tue, 14 May 2024 15:27:13 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1s6u3b-00GCHF-IK for pgsql-general@arkaria.postgresql.org; Tue, 14 May 2024 15:27:11 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s6u3a-00GCFT-MV for pgsql-general@lists.postgresql.org; Tue, 14 May 2024 15:27:11 +0000 Received: from wfout5-smtp.messagingengine.com ([64.147.123.148]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s6u3V-000D46-Vo for pgsql-general@postgresql.org; Tue, 14 May 2024 15:27:10 +0000 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailfout.west.internal (Postfix) with ESMTP id 647EE1C0014D; Tue, 14 May 2024 11:27:04 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Tue, 14 May 2024 11:27:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aklaver.com; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm2; t=1715700424; x=1715786824; bh=GjRz5eg38iNmls9S5ETKDCRgzV+6PhS6yWMmk/P84Ak=; b= qlhkCfd8rpzv0um0SbjaJ5V2JNFaO7oWYEyCbOld7PiFpyNVASo4PtYznqO7FbBJ 3+mxHilqybOQo2CHE9bPpDyyTKIanIoZRfNPE2vRFbXgurvVfU04W4M+ONoEnEIr vEQjDfP64ZUn9KsJICM7nyPEtotforvMn7+aPm5kiGjozLJ3Cgmkqv9lHgUzcYqJ Gjqt/OD46f/olPQph9CNsLAB9KXBmt7olbJO16c47jqXfv20Ani43mu0S+NNuzUY al1G9TUIx4cMgRvwplygwnDkz0uHIZ/j1Kp9YHeA0jxC/HKn1rL9czn2SwZFuxQc bPp990MTsT/1+mY/pj3SDw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1715700424; x= 1715786824; bh=GjRz5eg38iNmls9S5ETKDCRgzV+6PhS6yWMmk/P84Ak=; b=d xxKFI5OCTminuI5CYO846QBfoskg2tVS/JnEoyUcRue1SN9QZjYryJ9a4jSafRkt dEd9lisEvmmcqwAMb2+g/cTla9NmSrfpNvRnEfbUG02F1XcmY2iMvWZ/3k0q02Gc +E+EIUVam/gKkRH58qtn28IwqdwJQdbTwaTXz6hc9XstI/9ATzAzYasaCl4XmyrS S1ZkPlv0zHqLdiAt41xGsH1Z5/mup9CZI0wDqyImg2R9DclIdlShnMGbwimKL9an owpAvEsoOq6/oJTCel+dMlFG8GYmmXGWClsOoB006CBeP3O+SfrRhqCTWau0Coqo LnGu0JcSuZgA/4w8lUrzQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrvdegiedgkeejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepkfffgggfuffvfhfhjggtgfesthejredttddvjeenucfhrhhomheptegurhhi rghnucfmlhgrvhgvrhcuoegrughrihgrnhdrkhhlrghvvghrsegrkhhlrghvvghrrdgtoh hmqeenucggtffrrghtthgvrhhnpeekfeehuddvjeeigfeifeejtdduudffledvfeelheef tdeiffeugfdvkeelgedtvdenucffohhmrghinhepphhoshhtghhrvghsqhhlrdhorhhgne cuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheprggurhhi rghnrdhklhgrvhgvrhesrghklhgrvhgvrhdrtghomh X-ME-Proxy: Feedback-ID: i76984098:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 14 May 2024 11:27:03 -0400 (EDT) Message-ID: <7dff9a17-744d-437b-847c-18c161c8a901@aklaver.com> Date: Tue, 14 May 2024 08:27:02 -0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Valid until To: Rama Krishnan , Postgres General References: Content-Language: en-US From: Adrian Klaver In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 5/14/24 00:57, Rama Krishnan wrote: > Hi team, > > I have a question about the "valid until" parameter in the "create role" > command. > > I recently set a user's password validity to "2024-05-13", but despite > this, the user is still able to connect to the database. Is this a bug, > or is the "valid until" parameter just for identification purposes, > indicating when the password will expire? > > Could you please clarify this for me? https://www.postgresql.org/docs/current/sql-createrole.html " VALID UNTIL 'timestamp' The VALID UNTIL clause sets a date and time after which the role's password is no longer valid. If this clause is omitted the password will be valid for all time. " When did the user log in? What is the TimeZone setting in the database? > > > Thanks > > Ram -- Adrian Klaver adrian.klaver@aklaver.com