Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL
Date
Msg-id 20170919172811.GB4628@tamriel.snowman.net
Whole thread Raw
In response to Re: [HACKERS] USER Profiles for PostgreSQL  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL
Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL
List pgsql-hackers
Tom,

* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> chiru r <chirupg@gmail.com> writes:
> > We are looking  for User profiles in ope source PostgreSQL.
> > For example, If a  user password failed n+ times while login ,the user
> > access has to be blocked few seconds.
> > Please let us know, is there any plan to implement user profiles in feature
> > releases?.
>
> Not particularly.  You can do that sort of thing already via PAM,
> for example.

Ugh, hardly and it's hokey and a huge pain to do, and only works on
platforms that have PAM.

Better is to use an external authentication system (Kerberos, for
example) which can deal with this, but I do think this is also something
we should be considering for core, especially now that we've got a
reasonable password-based authentication method with SCRAM.

Thanks!

Stephen

pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: [HACKERS] Re: [COMMITTERS] pgsql: Perform only one ReadControlFile() during startup.
Next
From: Andres Freund
Date:
Subject: [HACKERS] Show backtrace when tap tests fail