Re: Passwordcheck configuration

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: Dave Hughes <dhughes20(at)gmail(dot)com>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: Passwordcheck configuration
Date: 2020-03-23 18:35:58
Message-ID: 20200323183558.GM13712@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Greetings,

* Dave Hughes (dhughes20(at)gmail(dot)com) wrote:
> Thank you for the information! This issue originated from a Department of
> Defense STIG (Security Technical Implementation Guides). It's a security
> check that applications and databases have to go through. I'll just leave
> this one as a "finding" since there isn't a way to really configure it to
> their requirements.

I believe the PG STIG encourages using PKI instead of using passwords
for authentication.

Thanks,

Stephen

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Julien Rouhaud 2020-03-23 19:47:25 Re: PG12 autovac issues
Previous Message Stephen Frost 2020-03-23 18:19:57 Re: Passwordcheck configuration