MIME-Version: 1.0
References: <CAJWX+EOModYYe-LDVP_1zceryEd186u=pcaTE6Sb_9XMtjhWKA@mail.gmail.com>
 <7dff9a17-744d-437b-847c-18c161c8a901@aklaver.com> <1102603.1715701509@sss.pgh.pa.us>
In-Reply-To: <1102603.1715701509@sss.pgh.pa.us>
From: Muhammad Imtiaz <imtiaz.m@bitnine.net>
Date: Tue, 14 May 2024 20:52:03 +0500
Message-ID: <CANwR1ORoTGxdhY38Lne8VtFW7fCv6=0NGCd1t6aP6OYLJA_wFg@mail.gmail.com>
Subject: Re: Valid until
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Adrian Klaver <adrian.klaver@aklaver.com>, Rama Krishnan <raghuldrag@gmail.com>, 
	Postgres General <pgsql-general@postgresql.org>
Content-Type: multipart/alternative; boundary="0000000000006ee1f206186bfc7d"
Archived-At: <https://www.postgresql.org/message-id/CANwR1ORoTGxdhY38Lne8VtFW7fCv6%3D0NGCd1t6aP6OYLJA_wFg%40mail.gmail.com>
Precedence: bulk

--0000000000006ee1f206186bfc7d
Content-Type: text/plain; charset="UTF-8"

Hi,
What is the outcome of this query for the specified user? Does the database
contain a value in the rolvaliduntil column?
 SELECT rolname, rolvaliduntil FROM pg_authid;
Regards,
M.Imtiaz

On Tue, 14 May 2024 at 20:45, Tom Lane <tgl@sss.pgh.pa.us> wrote:

> Adrian Klaver <adrian.klaver@aklaver.com> writes:
> > On 5/14/24 00:57, Rama Krishnan wrote:
> >> I recently set a user's password validity to "2024-05-13", but despite
> >> this, the user is still able to connect to the database. Is this a bug,
> >> or is the "valid until" parameter just for identification purposes,
> >> indicating when the password will expire?
>
> >      The VALID UNTIL clause sets a date and time after which the role's
> > password is no longer valid. If this clause is omitted the password will
> > be valid for all time.
>
> The important point there is that the *password* is not usable after
> the specified date.  If the user logs in via some non-password-based
> authentication method, that's fine (and it's on the infrastructure
> of that auth method to enforce whatever restrictions it thinks are
> appropriate).
>
>                         regards, tom lane
>
>
>

--0000000000006ee1f206186bfc7d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><font face=3D"arial, sans-serif">Hi,<br><span style=3D"col=
or:rgb(13,13,13)">What is the outcome of this query for the specified user?=
 Does the database contain a value in the </span><code style=3D"border:0px =
solid rgb(227,227,227);box-sizing:border-box;font-feature-settings:normal;c=
olor:rgb(13,13,13);font-weight:600">rolvaliduntil</code><span style=3D"colo=
r:rgb(13,13,13)"> column?</span>=C2=A0<br>=C2=A0SELECT rolname, rolvalidunt=
il FROM pg_authid;<br>Regards,<br>M.Imtiaz</font></div><br><div class=3D"gm=
ail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, 14 May 2024 at 20:=
45, Tom Lane &lt;<a href=3D"mailto:tgl@sss.pgh.pa.us">tgl@sss.pgh.pa.us</a>=
&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Adri=
an Klaver &lt;<a href=3D"mailto:adrian.klaver@aklaver.com" target=3D"_blank=
">adrian.klaver@aklaver.com</a>&gt; writes:<br>
&gt; On 5/14/24 00:57, Rama Krishnan wrote:<br>
&gt;&gt; I recently set a user&#39;s password validity to &quot;2024-05-13&=
quot;, but despite <br>
&gt;&gt; this, the user is still able to connect to the database. Is this a=
 bug, <br>
&gt;&gt; or is the &quot;valid until&quot; parameter just for identificatio=
n purposes, <br>
&gt;&gt; indicating when the password will expire?<br>
<br>
&gt;=C2=A0 =C2=A0 =C2=A0 The VALID UNTIL clause sets a date and time after =
which the role&#39;s <br>
&gt; password is no longer valid. If this clause is omitted the password wi=
ll <br>
&gt; be valid for all time.<br>
<br>
The important point there is that the *password* is not usable after<br>
the specified date.=C2=A0 If the user logs in via some non-password-based<b=
r>
authentication method, that&#39;s fine (and it&#39;s on the infrastructure<=
br>
of that auth method to enforce whatever restrictions it thinks are<br>
appropriate).<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 regards, tom lane<br>
<br>
<br>
</blockquote></div>

--0000000000006ee1f206186bfc7d--