Re: Rejecting weak passwords

Поиск
Список
Период
Сортировка
От Itagaki Takahiro
Тема Re: Rejecting weak passwords
Дата
Msg-id 20091118145109.A4BD.52131E4D@oss.ntt.co.jp
обсуждение исходный текст
Ответ на Re: Rejecting weak passwords  ("Albe Laurenz" <laurenz.albe@wien.gv.at>)
Ответы Re: Rejecting weak passwords
Re: Rejecting weak passwords
Re: Rejecting weak passwords
Список pgsql-hackers
"Albe Laurenz" <laurenz.albe@wien.gv.at> wrote:

> Heikki Linnakangas wrote:
> > I think it would better to add an explicit "isencrypted" parameter to
> > the check_password_hook function, rather than require the module to do
> > isMD5 on the password.
> 
> I agree on the second point, and I changed the patch accordingly.
> Here's the latest version.

Looks good. I change status of the patch to "Ready for Committer".

BTW, it might not be a work for this patch, we also need to
reject too long "VALID UNTIL" setting. If the password is
complex, we should not use the same password for a long time.

Regards,
---
ITAGAKI Takahiro
NTT Open Source Software Center




В списке pgsql-hackers по дате отправления:

Предыдущее
От: "Joshua D. Drake"
Дата:
Сообщение: Re: plpgsql: open for execute - add USING clause
Следующее
От: Pavel Stehule
Дата:
Сообщение: Re: plpgsql: open for execute - add USING clause