Thread: Credcheck max_auth_failure

Credcheck max_auth_failure

From
Teja Jakkidi
Date:
Hello Admins,

We are trying to setup password policies on open source Postgres 14 (on SUSE Linux) using credcheck on an instance that
hasgot stand by setup on other server. 
On primary, Installed the binaries, created the extension and enabled below parameter:
credcheck.max_auth_failure to 3;

1. The parameter is working as expected on primary and banning the id in the 3rd attempt with wrong password.
However, I am not able to figure out how to get the banned user back to working. Restarting instance will get the
banneduser working but restarting whole instance to activate one user is not a feasible solution. 
2. The same parameter is not working on the stand by instance. Even after 3 failed attempts user is still active.

Please let me know if you are aware of any solutions.

Thanks,
J. Teja.


Re: Credcheck max_auth_failure

From
"David G. Johnston"
Date:
On Wednesday, January 8, 2025, Teja Jakkidi <teja.jakkidi05@gmail.com> wrote:

1. The parameter is working as expected on primary and banning the id in the 3rd attempt with wrong password.
However, I am not able to figure out how to get the banned user back to working. Restarting instance will get the banned user working but restarting whole instance to activate one user is not a feasible solution.


You should read its docs.  It discusses this.


David J.