Re: Failed Login Attempts parameter - Mailing list pgsql-admin

From Lukasz Brodziak
Subject Re: Failed Login Attempts parameter
Date
Msg-id CAGWYGjUdhSoQr3xyd0bN1JbYcsg0rgZ2kDpMOKBJCPNKpXOemg@mail.gmail.com
Whole thread Raw
In response to Failed Login Attempts parameter  (Frank Cavaliero <fcavalie@us.ibm.com>)
Responses Re: Failed Login Attempts parameter  (Lukasz Brodziak <lukasz.brodziak@gmail.com>)
Re: Failed Login Attempts parameter  (Craig Ringer <craig@2ndQuadrant.com>)
List pgsql-admin
Hi,

As far as I know there is no such parameter in PG. If you use PG as a database for your program you can implement the feature in the appplication by logging the failed logins in separate table(or the one holding application users and their passwords) and then disable login for the user if number of failures is bigger than specified value.
Another way is to create a function in postgresql which will check failed login count and if the attempts go bigger than specified number it will run a REVOKE on the user role thus disabling login. Then admin will have to run GRANT for the user manually.

2012/11/14 Frank Cavaliero <fcavalie@us.ibm.com>
Hi,

I've been searching the web and reviewing documentation, but I cannot find any reference to whether or not a parameter, for example, failed_login_attempts, exists in PostgreSQL that determines the number of attempts a user can make before being locked.  In addition, if such a parameter or similar setup exists, is there also some database object that provides a current count of the failed login attempts?


Thanks,
Frank



Frank Cavaliero

Database Administrator

IBM Infosphere Guardium

IBM Software Group, Information Management

978-899-3635 - Direct

For Technical Services Support Please Call 978-899-9195.

 

This communication is intended only for the use of the individual or entity named as the addressee. It may contain information which is privileged and/or confidential under applicable law.  If you are not the intended recipient or such recipient's employee or agent, you are hereby notified that any dissemination, copy or disclosure of this communication is strictly prohibited.  If you have received this communication in error, please immediately notify us at 978-899-9195 or notify the sender by reply e-mail and expunge this communication without making any copies.  Thank you for your cooperation.

 




--
Łukasz Brodziak
"Do you bury me when I'm gone
Do you teach me while I'm here
Just as soon I belong
Then it's time I disappear"

pgsql-admin by date:

Previous
From: Shams Khan
Date:
Subject: Query Stuck in running server
Next
From: Lukasz Brodziak
Date:
Subject: Re: Failed Login Attempts parameter