[HACKERS] Enhancements to passwordcheck - Mailing list pgsql-hackers

From Bossart, Nathan
Subject [HACKERS] Enhancements to passwordcheck
Date
Msg-id AC785D69-41EC-4D0A-AC37-1F9FF55C9E34@amazon.com
Whole thread Raw
Responses Re: [HACKERS] Enhancements to passwordcheck  (Michael Paquier <michael.paquier@gmail.com>)
Re: [HACKERS] Enhancements to passwordcheck  (Euler Taveira <euler@timbira.com.br>)
Re: [HACKERS] Enhancements to passwordcheck  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
List pgsql-hackers
Hi hackers,

Currently, the passwordcheck module provides a few basic checks to strengthen
passwords.  However, any configuration must be ready at compile time, and many
common password requirements cannot be enforced without creating a custom
version of this module.  I think there are a number of useful parameters that
could be added to enable common password restrictions, including the following
list, which is based on some asks from our customers:

passwordcheck.min_password_lengthpasswordcheck.min_uppercase_letterspasswordcheck.min_lowercase_letterspasswordcheck.min_numberspasswordcheck.min_special_charspasswordcheck.superuser_can_bypasspasswordcheck.max_expiry_periodpasswordcheck.force_new_password

I'd like to use this thread to gauge community interest in adding this
functionality to this module.  If there is interest, I'll add it to the next
commitfest.

Nathan


--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

pgsql-hackers by date:

Previous
From: "Rady, Doug"
Date:
Subject: [HACKERS] PATCH: pgbench - option to build using ppoll() for larger connectioncounts
Next
From: Fabien COELHO
Date:
Subject: Re: [HACKERS] PATCH: pgbench - break out timing data for initializationphases