[ADMIN] password administration

1998-12-17 Thread Adam Maddock
Hi All, As one who is fairly new (within the last two months) to Postgre, I've looked through the Archives for this list a bit and have seen this issue addressed a number of times, but no strong solutions posted. Has anybody devised a good/secure way of allowing users to control their own passwo

[ADMIN] password administration

2010-08-05 Thread Mark Steben
Hi postgres gurus: I would like to set up a facility that enforces password changes for roles After a predefined period (30 days for instance) when logging into psql Or, at the very least, send an email out to notify that your current Password period is about to expire. Preferably, I'd like to

Re: [ADMIN] password administration

1998-12-17 Thread Charles Curley
I don't know about secure but what I've done is linked the pg_passwd file to /etc/passwd and then people remote ODBC user can change their database password via the passwd command (or yppasswd). I've got a RH 5.0 system running without shadowed password but with NIS. I'm curious what people think

Re: [ADMIN] password administration

1998-12-17 Thread Adam Maddock
Hmm... that doesn't work on my system because my system's logon/passwd commands use a different encryption altorhythm than Postgres. I wonder if there is a way to change one or the other's scheme. Did you have to hack anything or did it work "out-of-the-box"? My Linux kernel is 2.0.34 and my di

Re: [ADMIN] password administration

2010-08-05 Thread Craig James
On 8/5/10 12:58 PM, Mark Steben wrote: I would like to set up a facility that enforces password changes for roles After a predefined period (30 days for instance) when logging into psql Or, at the very least, send an email out to notify that your current Password period is about to expire. Prefe

Re: [ADMIN] password administration

2010-08-05 Thread Scott Marlowe
On Thu, Aug 5, 2010 at 2:20 PM, Craig James wrote: > On 8/5/10 12:58 PM, Mark Steben wrote: >> >> I would like to set up a facility that enforces password changes for roles >> After a predefined period (30 days for instance) when logging into psql >> Or, at the very least, send an email out to not

Re: [ADMIN] password administration

2010-08-05 Thread Tom Lane
"Mark Steben" writes: > I would like to set up a facility that enforces password changes for roles > After a predefined period (30 days for instance) when logging into psql > Or, at the very least, send an email out to notify that your current > Password period is about to expire. Usually we sug

Re: [ADMIN] password administration

2010-08-05 Thread Scott Marlowe
On Thu, Aug 5, 2010 at 2:27 PM, Scott Marlowe wrote: > On Thu, Aug 5, 2010 at 2:20 PM, Craig James > wrote: >> On 8/5/10 12:58 PM, Mark Steben wrote: >>> >>> I would like to set up a facility that enforces password changes for roles >>> After a predefined period (30 days for instance) when loggi

Re: [ADMIN] password administration

2010-08-05 Thread Tom Lane
Scott Marlowe writes: > On Thu, Aug 5, 2010 at 2:20 PM, Craig James > wrote: >> A better solution is to implement a password-strength algorithm and require >> people to select decent passwords to begin with. > Exactly. If you allow simpler passwords that have to be changed you > get things lik

Re: [ADMIN] password administration

2010-08-05 Thread Scott Marlowe
Also, for reference: http://research.microsoft.com/en-us/people/cormac/ Specifically: http://research.microsoft.com/users/cormac/papers/2009/SoLongAndNoThanks.pdf -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/m

Re: [ADMIN] password administration

2010-08-05 Thread Victor Hugo
Mark, You could use LDAP to? that? I use LDAP + apache []´s Victor Hugo 2010/8/5 Tom Lane : > "Mark Steben" writes: >> I would like to set up a facility that enforces password changes for roles >> After a predefined period (30 days for instance) when logging into psql >> Or, at the very leas

Re: [ADMIN] password administration

2010-08-05 Thread Victor Hugo
Correcting I use LDAP + postgresql 2010/8/5 Victor Hugo : > Mark, > > You could use LDAP to? that? > > I use LDAP + apache > > []´s > Victor Hugo > > > > 2010/8/5 Tom Lane : >> "Mark Steben" writes: >>> I would like to set up a facility that enforces password changes for roles >>> After a pre

Re: [ADMIN] password administration

2010-08-05 Thread Bob Lunney
Mark, Look into kerberos. You will have to recompile your server to use it. Bob Lunney --- On Thu, 8/5/10, Mark Steben wrote: > From: Mark Steben > Subject: [ADMIN] password administration > To: pgsql-admin@postgresql.org > Date: Thursday, August 5, 2010, 3:58 PM > > &

Re: [ADMIN] password administration

2010-08-08 Thread Andrzej Zawadzki
On 05.08.2010 22:54, Tom Lane wrote: > Scott Marlowe writes: > >> On Thu, Aug 5, 2010 at 2:20 PM, Craig James >> wrote: >> >>> A better solution is to implement a password-strength algorithm and require >>> people to select decent passwords to begin with. >>> > >> Exactly. If