Обсуждение: query to show locked / disabled users?

Поиск
Список
Период
Сортировка

query to show locked / disabled users?

От
Sbob
Дата:
I have a client that says there were break in attempts and many db users 
are now disabled / locked because of too many wrong pw attempts. Is 
there  a select that will show these users?


Thanks in advance






Re: query to show locked / disabled users?

От
"David G. Johnston"
Дата:
On Thursday, April 14, 2022, Sbob <sbob@quadratum-braccas.com> wrote:
I have a client that says there were break in attempts and many db users are now disabled / locked because of too many wrong pw attempts. Is there  a select that will show these users?


 You can look at pg_roles.

David J.

Re: query to show locked / disabled users?

От
Tom Lane
Дата:
"David G. Johnston" <david.g.johnston@gmail.com> writes:
> On Thursday, April 14, 2022, Sbob <sbob@quadratum-braccas.com> wrote:
>> I have a client that says there were break in attempts and many db users
>> are now disabled / locked because of too many wrong pw attempts. Is there
>> a select that will show these users?

>  You can look at pg_roles.

That probably won't help much, because Postgres has no built-in
mechanism for disabling users on the basis of "too many wrong pw
attempts".  Whatever has decided that must be external to Postgres
(perhaps getting accessed via LDAP or PAM?) and you're going to have
to look at its state.  In short, there's not enough info here for
us to offer any useful advice.

            regards, tom lane



Re: query to show locked / disabled users?

От
Sbob
Дата:
Got it, thanks


On 4/14/22 13:34, Tom Lane wrote:
> "David G. Johnston" <david.g.johnston@gmail.com> writes:
>> On Thursday, April 14, 2022, Sbob <sbob@quadratum-braccas.com> wrote:
>>> I have a client that says there were break in attempts and many db users
>>> are now disabled / locked because of too many wrong pw attempts. Is there
>>> a select that will show these users?
>>   You can look at pg_roles.
> That probably won't help much, because Postgres has no built-in
> mechanism for disabling users on the basis of "too many wrong pw
> attempts".  Whatever has decided that must be external to Postgres
> (perhaps getting accessed via LDAP or PAM?) and you're going to have
> to look at its state.  In short, there's not enough info here for
> us to offer any useful advice.
>
>             regards, tom lane