Re: Rejecting weak passwords

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: Rejecting weak passwords
Дата
Msg-id 200910161734.n9GHYio03654@momjian.us
обсуждение исходный текст
Ответ на Re: Rejecting weak passwords  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: Rejecting weak passwords
Список pgsql-hackers
Tom Lane wrote:
> Bruce Momjian <bruce@momjian.us> writes:
> > So, are we agreed to provide a hook on the server side, but to use it
> > you have to configure your system with SSL and 'password'?  I can add
> > that to the TODO list.
> 
> I think we're agreed to provide the hook.  What restrictions the hook
> might enforce are not our concern.

Great, added to TODO:
Allow server-side enforcement of password policies    Password checks might include password complexity or non-reuse
ofpasswords.This facility will require the client to send the password tothe server in plain-text, so SSL and
'password'authentication isnecessary to use this features.        *
http://archives.postgresql.org/pgsql-hackers/2009-09/msg01766.php       *
http://archives.postgresql.org/pgsql-hackers/2009-10/msg00025.php
 

--  Bruce Momjian  <bruce@momjian.us>        http://momjian.us EnterpriseDB
http://enterprisedb.com
 + If your life is a hard drive, Christ can be your backup. +


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Reworks for Access Control facilities (r2363)
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: Rejecting weak passwords