Обсуждение: PostgreSQL Account security

Поиск
Список
Период
Сортировка

PostgreSQL Account security

От
"Arnold, Sandra"
Дата:
I was working on a security plan for PostgreSQL.  One of my requirements is to lock any accounts where a login attempt was made and failed authentication three consecutive times.  I cannot find or I am missing in the PostgreSQL documentation on how to configure the accounts or database to do this.  Is this possible in PostgreSQL?
 
Thanks,

Sandra Arnold
Sr. DBA
DOE/OSTI

Re: PostgreSQL Account security

От
Tom Lane
Дата:
"Arnold, Sandra" <ArnoldS@osti.gov> writes:
> I was working on a security plan for PostgreSQL.  One of my requirements
> is to lock any accounts where a login attempt was made and failed
> authentication three consecutive times.  I cannot find or I am missing
> in the PostgreSQL documentation on how to configure the accounts or
> database to do this.  Is this possible in PostgreSQL?

There's nothing built-in for that, but if you use PAM authentication
then you can set up the PAM configuration to do this, or pretty much
any other common login-security trick.

            regards, tom lane