MIME-Version: 1.0
References: 
 <CAEQStStkY7Hg-MhUnfbn1wMQGzM88uSQ=bLs3BPxGn_WCOmBjA@mail.gmail.com>
 <577837.1634054018@sss.pgh.pa.us>
 <CAEQStSu8v2C8sJcMxk_h=9Kq=Ano0T8kXg6a0L9iOZ8UTVpwBQ@mail.gmail.com>
 <20211012232823.GA2342@momjian.us>
 <CAEQStSvQqubp3xOTinVtkgaEM=1-h0GrYAbYA_saX_Dot68mvA@mail.gmail.com>
 <17bff549ad836b2a8dc17e8f4fc42202e1424903.camel@cybertec.at>
In-Reply-To: <17bff549ad836b2a8dc17e8f4fc42202e1424903.camel@cybertec.at>
From: Agil Azimov <agil.azimov@gmail.com>
Date: Tue, 19 Oct 2021 17:01:54 +0400
Message-ID: 
 <CAEQStSsqiCb_ROOrD5PkAwDG8jbOWwfpsK9VDVMwRit6WoUSmA@mail.gmail.com>
Subject: Re: Password settings requirements
To: Laurenz Albe <laurenz.albe@cybertec.at>
Cc: Bruce Momjian <bruce@momjian.us>, Tom Lane <tgl@sss.pgh.pa.us>,
	pgsql-novice@lists.postgresql.org
Content-Type: multipart/alternative; boundary="000000000000aed73f05ceb44492"
Archived-At: 
 <https://www.postgresql.org/message-id/CAEQStSsqiCb_ROOrD5PkAwDG8jbOWwfpsK9VDVMwRit6WoUSmA%40mail.gmail.com>
Precedence: bulk

--000000000000aed73f05ceb44492
Content-Type: text/plain; charset="UTF-8"

Thank you for the clarification!  The issue is that I have to check and
report the current state )). Is there any way I can check current password
settings (minimal password length for instance and maximum password
lifetime).  Ideally all of the settings mentioned above ). I appreciate any
help you can provide.

Warm regards,
Agil

On Tue, Oct 19, 2021 at 4:20 PM Laurenz Albe <laurenz.albe@cybertec.at>
wrote:

> On Tue, 2021-10-19 at 11:38 +0400, Agil Azimov wrote:
> >
> > On Wed, Oct 13, 2021 at 3:28 AM Bruce Momjian <bruce@momjian.us> wrote:
> > > On Tue, Oct 12, 2021 at 08:46:44PM +0400, Agil Azimov wrote:
> > > > Thank you for your message. Will I be able to set all the settings I
> mentioned
> > > > before if I will set SCRAM?
> > >
> > > No.  I think you need to use PAM or something like that if you want
> > > those requirements.
> > >
> > Thank you for your reply! I would like to check the current password
> requirements of PostgreSQL server. Could you please let me know which
> command will show me the
> > 1. Minimal requirements for password length
> > 2. Maximum password age
> > 3. If the password complexity requirements are turned on.
> > 4. Password history requirement - number of passwords
> > 5. Account lockout threshold.
> >
> > I appreciate you support.
>
> As Bruce said, there are no such requirements.
> You will have to manage your passwords outside of PostgreSQL if
> you need to impose password rules.
> PAM, the pluggabla authentication mocule of Linux, is one way of doing
> that.
>
> Yours,
> Laurenz Albe
> --
> Cybertec | https://www.cybertec-postgresql.com
>
>

--000000000000aed73f05ceb44492
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Thank you for the clarification!=C2=A0

The issue is that I have to check and report the current state )).=C2=A0Is =
there any way I can check current password settings (minimal password lengt=
h for instance and maximum password lifetime).=C2=A0 Ideally all of the set=
tings mentioned above ). I appreciate any help=C2=A0you can provide.<br><di=
v><br></div><div>Warm regards,</div><div>Agil</div></div><br><div class=3D"=
gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, Oct 19, 2021 at =
4:20 PM Laurenz Albe &lt;<a href=3D"mailto:laurenz.albe@cybertec.at">lauren=
z.albe@cybertec.at</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote=
" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);=
padding-left:1ex">On Tue, 2021-10-19 at 11:38 +0400, Agil Azimov wrote:<br>
&gt; <br>
&gt; On Wed, Oct 13, 2021 at 3:28 AM Bruce Momjian &lt;<a href=3D"mailto:br=
uce@momjian.us" target=3D"_blank">bruce@momjian.us</a>&gt; wrote:<br>
&gt; &gt; On Tue, Oct 12, 2021 at 08:46:44PM +0400, Agil Azimov wrote:<br>
&gt; &gt; &gt; Thank you for your message. Will I be able to set all the se=
ttings I mentioned<br>
&gt; &gt; &gt; before if I will set SCRAM?<br>
&gt; &gt; <br>
&gt; &gt; No.=C2=A0 I think you need to use PAM or something like that if y=
ou want<br>
&gt; &gt; those requirements.<br>
&gt; &gt; <br>
&gt; Thank you for your reply! I would like to check the current password r=
equirements of PostgreSQL server. Could you please let me know which comman=
d will show me the<br>
&gt; 1. Minimal requirements for password length<br>
&gt; 2. Maximum password age<br>
&gt; 3. If the password complexity requirements are turned on. <br>
&gt; 4. Password history requirement - number of passwords<br>
&gt; 5. Account lockout threshold.<br>
&gt; <br>
&gt; I appreciate you support.<br>
<br>
As Bruce said, there are no such requirements.<br>
You will have to manage your passwords outside of PostgreSQL if<br>
you need to impose password rules.<br>
PAM, the pluggabla authentication mocule of Linux, is one way of doing that=
.<br>
<br>
Yours,<br>
Laurenz Albe<br>
-- <br>
Cybertec | <a href=3D"https://www.cybertec-postgresql.com" rel=3D"noreferre=
r" target=3D"_blank">https://www.cybertec-postgresql.com</a><br>
<br>
</blockquote></div>

--000000000000aed73f05ceb44492--