Lock Postgres account after X number of failed logins? - Mailing list pgsql-general

From Wolff, Ken L
Subject Lock Postgres account after X number of failed logins?
Date
Msg-id 61463e206b7c4c0ca17b03a59e890b78@lmco.com
Whole thread Raw
Responses Re: Lock Postgres account after X number of failed logins?  (Adrian Klaver <adrian.klaver@aklaver.com>)
Re: Lock Postgres account after X number of failed logins?  (Christian Ramseyer <rc@networkz.ch>)
List pgsql-general

Hi, everyone.  Wondering if there’s a way in PostgreSQL to automatically lock accounts after a number of failed logins (a security requirement for my organization).  I’ve been investigating this for a while and the only reference I’ve found is to write a hook:  https://wiki.postgresql.org/images/e/e3/Hooks_in_postgresql.pdf , which is a little more involved than I’d hoped.  Was hoping there was something native available within PostgreSQL.

 

Locking accounts after X number of failed logins is an excellent way to defeat brute force attacks, so I’m just wondering if there’s a way to do this, other than the aforementioned hook.

 

This is my first time using this mail list so apologies in advance if I’m not following etiquette or doing something incorrectly.

 

Thanks in advance.

 

 

Ken W

pgsql-general by date:

Previous
From: Peter
Date:
Subject: Re: 12.2: Howto check memory-leak in worker?
Next
From: Adrian Klaver
Date:
Subject: Re: Lock Postgres account after X number of failed logins?