Re: Rejecting weak passwords - Mailing list pgsql-hackers

From Albe Laurenz
Subject Re: Rejecting weak passwords
Date
Msg-id D960CB61B694CF459DCFB4B0128514C203937F67@exadv11.host.magwien.gv.at
Whole thread Raw
In response to Re: Rejecting weak passwords  (Andrew Dunstan <andrew@dunslane.net>)
Responses Re: Rejecting weak passwords  (Magnus Hagander <magnus@hagander.net>)
List pgsql-hackers
Andrew Dunstan wrote:
>>> So here's the patch.
>>> I don't think there is documentation required;
>>> correct me if I am wrong.
>>
>> How will people know how to use it, or that it's even there without at
>> least a note in the docs somewhere?
>
> I'd prefer to have an example as a contrib module, as well as docs.
> Quite apart from anything else, how the heck would we test it without
> such a thing?

I was not sure because no other hooks were documented anywhere else
than in the code.

I could add a paragraph in the "auth-password" section of
client-auth.sgml. Or is there a better place?

I could easily write a simple contrib that adds a check for
username = password if there is interest.

Yours,
Laurenz Albe


pgsql-hackers by date:

Previous
From: Andrew Dunstan
Date:
Subject: Re: Rejecting weak passwords
Next
From: Boszormenyi Zoltan
Date:
Subject: Re: CommitFest 2009-09, two weeks on