pg.ddx.io pgsql-sql@postgresql.org mailing list archive
help / color / mirror / Atom feedPassword Policy
6+ messages / 5 participants
[nested] [flat]
* Password Policy
@ 2007-02-10 19:55 Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
2007-02-10 21:32 ` Re: Password Policy Clodoaldo <clodoaldo.pinto.neto@gmail.com>
2007-02-10 22:46 ` Re: Password Policy Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
2007-02-12 08:19 ` Re: [SQL] Password Policy Richard Huxton <dev@archonet.com>
0 siblings, 3 replies; 6+ messages in thread
From: Ezequias Rodrigues da Rocha @ 2007-02-10 19:55 UTC (permalink / raw)
To: pgsql-sql@postgresql.org, Pgadmin-Support <pgadmin-support@postgresql.org>
Hi list,
Is there any password polity that postgresql implement ?
It is possible to put a set all no administrators passwords to = '123456'
from times and times ?
Has anyone implement a dinamic password autentication (the password changes
according the date/month etc of a day ) ?
Regards ...
Ezequias
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Password Policy
2007-02-10 19:55 Password Policy Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
@ 2007-02-10 21:32 ` Clodoaldo <clodoaldo.pinto.neto@gmail.com>
2007-02-10 21:46 ` Re: Password Policy Andy Shellam (Mailing Lists) <andy.shellam-lists@mailnetwork.co.uk>
2 siblings, 1 reply; 6+ messages in thread
From: Clodoaldo @ 2007-02-10 21:32 UTC (permalink / raw)
To: Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>; +Cc: pgsql-sql@postgresql.org, Pgadmin-Support <pgadmin-support@postgresql.org>
2007/2/10, Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>:
> Hi list,
>
> Is there any password polity that postgresql implement ?
>
> It is possible to put a set all no administrators passwords to = '123456'
> from times and times ?
>
> Has anyone implement a dinamic password autentication (the password changes
> according the date/month etc of a day ) ?
Are you sure you are posting to the correct list? The postgresql
general list is:
http://archives.postgresql.org/pgsql-general/
Regards,
--
Clodoaldo Pinto Neto
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Password Policy
2007-02-10 19:55 Password Policy Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
2007-02-10 21:32 ` Re: Password Policy Clodoaldo <clodoaldo.pinto.neto@gmail.com>
@ 2007-02-10 21:46 ` Andy Shellam (Mailing Lists) <andy.shellam-lists@mailnetwork.co.uk>
0 siblings, 0 replies; 6+ messages in thread
From: Andy Shellam (Mailing Lists) @ 2007-02-10 21:46 UTC (permalink / raw)
To: Clodoaldo <clodoaldo.pinto.neto@gmail.com>; +Cc: Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>; Pgadmin-Support <pgadmin-support@postgresql.org>
Clodoaldo wrote:
> 2007/2/10, Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>:
>> Hi list,
>>
>> Is there any password polity that postgresql implement ?
>>
>> It is possible to put a set all no administrators passwords to =
>> '123456'
>> from times and times ?
>>
>> Has anyone implement a dinamic password autentication (the password
>> changes
>> according the date/month etc of a day ) ?
>
> Are you sure you are posting to the correct list? The postgresql
> general list is:
> http://archives.postgresql.org/pgsql-general/
>
> Regards,
pgsql-admin would also be appropriate to help with this.
Regards
Andy
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Password Policy
2007-02-10 19:55 Password Policy Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
@ 2007-02-10 22:46 ` Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
2007-02-11 05:18 ` Re: Password Policy Christopher Browne <cbbrowne@acm.org>
2 siblings, 1 reply; 6+ messages in thread
From: Ezequias Rodrigues da Rocha @ 2007-02-10 22:46 UTC (permalink / raw)
To: pgsql-general@postgresql.org; pgsql-admin@postgresql.org
>
> Hi list (my first post),
>
> Is there any password polity that postgresql implement ?
>
> It is possible to put a set all no administrators passwords to = '123456'
> from times and times ?
>
> Has anyone implement a dinamic password autentication (the password
> changes according the date/month etc of a day ) ?
Is there any function to encript, decript plain text in PostgreSQL and if
it is aplicable ?
Regards ...
> Ezequias
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: Password Policy
2007-02-10 19:55 Password Policy Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
2007-02-10 22:46 ` Re: Password Policy Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
@ 2007-02-11 05:18 ` Christopher Browne <cbbrowne@acm.org>
0 siblings, 0 replies; 6+ messages in thread
From: Christopher Browne @ 2007-02-11 05:18 UTC (permalink / raw)
To: pgsql-admin@postgresql.org
In the last exciting episode, ezequias.rocha@gmail.com ("Ezequias Rodrigues da Rocha") wrote:
> Hi list (my first post),
>
> Is there any password polity that postgresql implement ?
No, that would be a serious mistake, as it would prevent people from
having local policies that differed from the "PostgreSQL policy."
> It is possible to put a set all no administrators passwords to
> = '123456' from times and times ?
I'm not quite certain what you mean by that...
Do you mean you want to be able to set all non-administrators'
passwords to some particular value?
You could do that by setting one user's password to a particular
plaintext form, and then alter the others to match it.
Thus:
alter user stalking_horse password to '123456';
update pg_shadow set passwd = (select passwd from pg_shadow where usename = 'stalking_horse') and not usesuper;
I'm not sure that's an entirely wonderful policy, though.
> Has anyone implement a dinamic password autentication (the password
> changes according the date/month etc of a day ) ?
Well, you could use ident-based authentication, and then use some
wacky method to authenticate the user at the Unix level via PAM...
Changing passwords that often strikes me as being the wrong kind of
approach to this. Having a flurry of passwords that users can't
possibly remember is a clear route to having passwords sitting on
Post-It notes on cubicles.
I'd be much more inclined to use an unrememberable random password,
stowed in ~/.pgpass, which doesn't need to expire terribly often.
The other option would be to use ssh style keys for authentication;
that isn't possible now, but would be an attractive feature.
> Is there any function to encript, decript plain text in PostgreSQL
> and if it is aplicable ?
There is a contrib module, pgcrypto, which is quite suitable for such
purposes...
--
output = ("cbbrowne" "@" "gmail.com")
http://linuxfinances.info/info/emacs.html
The purpose of an undergraduate education at MIT is to give you a case
of post-traumatic stress syndrome that won't wear off for forty years.
^ permalink raw reply [nested|flat] 6+ messages in thread
* Re: [SQL] Password Policy
2007-02-10 19:55 Password Policy Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
@ 2007-02-12 08:19 ` Richard Huxton <dev@archonet.com>
2 siblings, 0 replies; 6+ messages in thread
From: Richard Huxton @ 2007-02-12 08:19 UTC (permalink / raw)
To: Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>; +Cc: pgsql-sql@postgresql.org, Pgadmin-Support <pgadmin-support@postgresql.org>
Ezequias Rodrigues da Rocha wrote:
> Hi list,
>
> Is there any password polity that postgresql implement ?
>
> It is possible to put a set all no administrators passwords to = '123456'
> from times and times ?
>
> Has anyone implement a dinamic password autentication (the password changes
> according the date/month etc of a day ) ?
Use PAM/LDAP/Kerberos to handle your passwords and you have access to
all sorts of options.
--
Richard Huxton
Archonet Ltd
^ permalink raw reply [nested|flat] 6+ messages in thread
end of thread, other threads:[~2007-02-12 08:19 UTC | newest]
Thread overview: 6+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2007-02-10 19:55 Password Policy Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
2007-02-10 21:32 ` Clodoaldo <clodoaldo.pinto.neto@gmail.com>
2007-02-10 21:46 ` Andy Shellam (Mailing Lists) <andy.shellam-lists@mailnetwork.co.uk>
2007-02-10 22:46 ` Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
2007-02-11 05:18 ` Christopher Browne <cbbrowne@acm.org>
2007-02-12 08:19 ` Richard Huxton <dev@archonet.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox