Re: Pasword expiration warning

From: Nathan Bossart <nathandbossart(at)gmail(dot)com>
To: Gilles Darold <gilles(at)darold(dot)net>
Cc: Zsolt Parragi <zsolt(dot)parragi(at)percona(dot)com>, Japin Li <japinli(at)hotmail(dot)com>, Yuefei Shi <shiyuefei1004(at)gmail(dot)com>, songjinzhou <tsinghualucky912(at)foxmail(dot)com>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>, Andrew Dunstan <andrew(at)dunslane(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, liu xiaohui <liuxh(dot)zj(dot)cn(at)gmail(dot)com>, Steven Niu <niushiji(at)gmail(dot)com>
Subject: Re: Pasword expiration warning
Date: 2026-02-02 17:04:03
Message-ID: aYDZA3r3lG2oKc5D@nathan
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Fri, Jan 30, 2026 at 12:33:54PM +0100, Gilles Darold wrote:
> Here a new v12 version of the patch. Changes are the following:

Thanks. I spent some time preparing this for commit, and I came up with
the attached. Notable changes include:

* Renamed the parameter to password_expiration_warning_threshold. It's a
mouthful, but I thought it was more descriptive.

* Changed the units for the parameter to minutes. I can't imagine anyone
needs more granularity than hours or days, let alone seconds, so IMO
minutes is a good middle ground.

* I added a new "connection warnings" infrastructure that we can reuse
if/when we want to emit warnings for MD5 passwords.

* Moved the warning messages to Port. ClientConnectionInfo appears to be
meant only for parallel workers, and I don't think we will ever want to
emit connection warnings there.

* Moved the tests into 001_password.pl. I'm a bit concerned about these
tests being flaky, but I've tried setting the VALID UNTIL dates to make
spurious failures virtually impossible.

WDYT?

--
nathan

Attachment Content-Type Size
v13-0001-Add-password-expiration-warnings.patch text/plain 13.6 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Bertrand Drouvot 2026-02-02 17:16:30 Re: Flush some statistics within running transactions
Previous Message Tom Lane 2026-02-02 16:18:55 Re: AIX support