public inbox for [email protected]
help / color / mirror / Atom feedFrom: Muhammad Imtiaz <[email protected]>
To: Tom Lane <[email protected]>
Cc: Adrian Klaver <[email protected]>
Cc: Rama Krishnan <[email protected]>
Cc: Postgres General <[email protected]>
Subject: Re: Valid until
Date: Tue, 14 May 2024 20:52:03 +0500
Message-ID: <CANwR1ORoTGxdhY38Lne8VtFW7fCv6=0NGCd1t6aP6OYLJA_wFg@mail.gmail.com> (raw)
In-Reply-To: <[email protected]>
References: <CAJWX+EOModYYe-LDVP_1zceryEd186u=pcaTE6Sb_9XMtjhWKA@mail.gmail.com>
<[email protected]>
<[email protected]>
Hi,
What is the outcome of this query for the specified user? Does the database
contain a value in the rolvaliduntil column?
SELECT rolname, rolvaliduntil FROM pg_authid;
Regards,
M.Imtiaz
On Tue, 14 May 2024 at 20:45, Tom Lane <[email protected]> wrote:
> Adrian Klaver <[email protected]> writes:
> > On 5/14/24 00:57, Rama Krishnan wrote:
> >> I recently set a user's password validity to "2024-05-13", but despite
> >> this, the user is still able to connect to the database. Is this a bug,
> >> or is the "valid until" parameter just for identification purposes,
> >> indicating when the password will expire?
>
> > The VALID UNTIL clause sets a date and time after which the role's
> > password is no longer valid. If this clause is omitted the password will
> > be valid for all time.
>
> The important point there is that the *password* is not usable after
> the specified date. If the user logs in via some non-password-based
> authentication method, that's fine (and it's on the infrastructure
> of that auth method to enforce whatever restrictions it thinks are
> appropriate).
>
> regards, tom lane
>
>
>
view thread (5+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected], [email protected]
Subject: Re: Valid until
In-Reply-To: <CANwR1ORoTGxdhY38Lne8VtFW7fCv6=0NGCd1t6aP6OYLJA_wFg@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox