From: | Gilles Darold via PostgreSQL Announce <announce-noreply(at)postgresql(dot)org> |
---|---|
To: | PostgreSQL Announce <pgsql-announce(at)lists(dot)postgresql(dot)org> |
Subject: | Credcheck version 2.1 released |
Date: | 2023-07-16 13:04:30 |
Message-ID: | 168951267076.41166.12072252193128633405@wrigleys.postgresql.org |
Views: | Whole Thread | Raw Message | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-announce |
Grenoble, France - July 15, 2023
## PostgreSQL credcheck extension
The credcheck PostgreSQL extension provides few general credential checks, which will be evaluated during the user creation, during the password change and user renaming. By using this extension, we can define a set of rules:
* allow a specific set of credentials
* reject a certain type of credentials
* deny password that can be easily cracked
* enforce use of an expiration date with a minimum of day for a password
* define a password reuse policy
* define the number of authentication failure allowed before a user is banned
Release v2.1 adds a two new features and fix issues reported by users since last release.
- Add custom configuration variable `credcheck.encrypted_password`
allowed to allow the use of encrypted password in CREATE or
ALTER ROLE statement. Default (off) is to not allow encrypted password
and to fire an error.
- Add the possibility to check the easiness of a password by the use of
the cracklib tool. This work is simply a integration of a copy/paste
from the passwordcheck extension available in the contrib/ directory.
Credits to the author Laurenz Albe.
- Fix failure count issue when ssl is disabled.
Upgrade require a PostgreSQL restart to reload the credcheck library.
Complete list of changes is available [here](https://github.com/MigOpsRepos/credcheck/blob/v2.1/ChangeLog)
## Links & Credits
credcheck is an open project under the PostgreSQL license created at [MigOps Inc](https://migops.com/), developped and maintained by [Gilles Darold](https://www.darold.net/).
Any contribution to build a better tool is welcome. You can send your ideas, features requests or patches
using the GitHub tools.
**Links :**
* Download: [https://github.com/MigOpsRepos/credcheck/releases/](https://github.com/MigOpsRepos/credcheck/releases/)
* Support: use GitHub report tool at [https://github.com/MigOpsRepos/credcheck/issues](https://github.com/MigOpsRepos/credcheck/issues)
## About credcheck
The credcheck extension is an original work of [MigOps Inc](https://migops.com/), Since MigOPs is closed Gilles Darold is the official maintainer. If you need more information please [contact me](mailto:gilles(at)darold(dot)net)
Documentation at [https://github.com/MigOpsRepos/credcheck#readme](https://github.com/MigOpsRepos/credcheck#readme)
From | Date | Subject | |
---|---|---|---|
Next Message | EDB via PostgreSQL Announce | 2023-07-20 12:39:25 | MongoDB, MySQL, Hadoop (HDFS) Foreign Data Wrappers updated to support PostgreSQL 16 |
Previous Message | Toshiba via PostgreSQL Announce | 2023-07-12 13:24:36 | High-Performance SQL Cluster Engine PGSpider 3.1.0 released |