Re: Password policy - Mailing list pgsql-hackers

From Andrew Dunstan
Subject Re: Password policy
Date
Msg-id 478D41CF.3030801@dunslane.net
Whole thread Raw
In response to Password policy  ("Roberts, Jon" <Jon.Roberts@asurion.com>)
List pgsql-hackers

Roberts, Jon wrote:
> I need to set a basic password policy for accounts but I don't see any
> documentation on how to do it.  I'm assuming there is a way to do this,
> maybe even with a trigger.
>
> The policy would be something like this:
> 1.  Must contain letters and numbers
> 2.  Must be at least 8 characters long
> 3.  Must contain one special character (#,@,$,%,!, etc)
> 4.  Password (not the account) must expire after 90 days
> 5.  Must warn users 10 days before the expire to change the password
>
>
>   

This question really belongs on the -general list, not the -hackers list 
(as do all questions about usage).

The short answer is "not really". You could use an external password 
source like PAM  or LDAP that enforced such restrictions.

cheers

andrew


pgsql-hackers by date:

Previous
From: "Roberts, Jon"
Date:
Subject: Password policy
Next
From: Andrew Dunstan
Date:
Subject: COPY encoding