Configuration questions

--00163630fd53d9b794048382ee21
Content-Type: text/plain; charset=ISO-8859-1

How do I configure postgres to lock a user's account after X failed login
attempts, where X is an arbitrary number.

Also is there a way to limit the number of concurrent connections on a per
account basis?


-Kevin

--00163630fd53d9b794048382ee21
Content-Type: text/html; charset=ISO-8859-1

How do I configure postgres to lock a user's account after X failed login attempts, where X is an arbitrary number.

Also is there a way to limit the number of concurrent connections on a per account basis?



-Kevin


--00163630fd53d9b794048382ee21--

Re: Configuration questions

Kevin Crain writes:

> How do I configure postgres to lock a user's account after X failed login
> attempts, where X is an arbitrary number.

Don't think there is a way to do that.
Perhaps using an authentication mechanism that supports that and then using
it to connect to Postgres..
This page may be of interest:
http://www.postgresql.org/docs/current/static/auth-methods.h tml


> Also is there a way to limit the number of concurrent connections on a per
> account basis?

Don't think there is an option for that either.

--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

Re: Configuration questions

На 05.4.2010 23:11, Kevin Crain напис=D0=
°:
[...]
> Also is there a way to limit the number of concurrent connections on a =
per
> account basis?

ALTER ROLE CONNECTION LIMIT ;

(http://www.postgresql.org/docs/current/static/sql-alterrole .html)



--=20
Milen A. Radev


--=20
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

Re: Configuration questions

Francisco Reyes writes:
> Kevin Crain writes:
>> How do I configure postgres to lock a user's account after X failed login
>> attempts, where X is an arbitrary number.

> Don't think there is a way to do that.
> Perhaps using an authentication mechanism that supports that and then using
> it to connect to Postgres..

The usual suggestion is to use PAM if you want a customized login
policy.

regards, tom lane

--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

Re: Configuration questions

Le 06/04/2010 20:45, Francisco Reyes a =E9crit :
> Kevin Crain writes:
>=20
>> How do I configure postgres to lock a user's account after X failed
>> login attempts, where X is an arbitrary number.
>=20
> Don't think there is a way to do that.
> Perhaps using an authentication mechanism that supports that and then
> using it to connect to Postgres..
> This page may be of interest:
> http://www.postgresql.org/docs/current/static/auth-methods.h tml
>=20

Yeah, an external authentication tool can probably do that. The internal
ones (password, md5, and crypt) won't.

>> Also is there a way to limit the number of concurrent connections on a
>> per account basis?
>=20
> Don't think there is an option for that either.
>=20

Sure, there is one:

ALTER ROLE your-user WITH CONNECTION LIMIT x;

See http://www.postgresql.org/docs/8.4/interactive/sql-alterrole .html
for more details.


--=20
Guillaume.
http://www.postgresqlfr.org
http://dalibo.com

--=20
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin