MIME-Version: 1.0
From: =?UTF-8?B?5by15a6455GL?= <kenny020307@gmail.com>
Date: Wed, 11 Dec 2024 18:46:14 +0800
Message-ID: <CAFsaSDgSPjLOmk51fZt_zYPEUnFOCQ+92g_g2OSMjNbMa4h2xg@mail.gmail.com>
Subject: Credcheck- credcheck.max_auth_failure
To: pgsql-general@lists.postgresql.org
Content-Type: multipart/alternative; boundary="000000000000264a510628fc4fd4"
Archived-At: <https://www.postgresql.org/message-id/CAFsaSDgSPjLOmk51fZt_zYPEUnFOCQ%2B92g_g2OSMjNbMa4h2xg%40mail.gmail.com>
Precedence: bulk

--000000000000264a510628fc4fd4
Content-Type: text/plain; charset="UTF-8"

In the use of the Credcheck suite, the parameter
"credcheck.max_auth_failure = '3'" is set in the postgresql.conf file to
limit users from entering incorrect passwords more than three times, after
which their account will be locked. Due to certain requirements, I would
like to ask if there is a way or feature to set this parameter differently
for a specific user or role, so that it does not apply to them. I
considered using "credcheck.whitelist" to exclude certain accounts, but
this would cause all other parameters to apply as well, and the account
would still require the other password complexity settings. I only wish to
exclude the "credcheck.max_auth_failure" parameter. Thank you in advance
for your response, and I would appreciate any assistance you can provide!

--000000000000264a510628fc4fd4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div><div>In the use of the Credcheck suite, the parameter &quot;credcheck.=
max_auth_failure =3D &#39;3&#39;&quot; is set in the postgresql.conf file t=
o limit users from entering incorrect passwords more than three times, afte=
r which their account will be locked. Due to certain requirements, I would =
like to ask if there is a way or feature to set this parameter differently =
for a specific user or role, so that it does not apply to them.

I considered using &quot;credcheck.whitelist&quot; to exclude certain accou=
nts, but this would cause all other parameters to apply as well, and the ac=
count would still require the other password complexity settings. I only wi=
sh to exclude the &quot;credcheck.max_auth_failure&quot; parameter.

Thank you in advance for your response, and I would appreciate any assistan=
ce you can provide!</div>
</div>

--000000000000264a510628fc4fd4--