Re: Pasword expiration warning

From: Nathan Bossart <nathandbossart(at)gmail(dot)com>
To: Gilles Darold <gilles(at)darold(dot)net>
Cc: Zsolt Parragi <zsolt(dot)parragi(at)percona(dot)com>, Japin Li <japinli(at)hotmail(dot)com>, Yuefei Shi <shiyuefei1004(at)gmail(dot)com>, songjinzhou <tsinghualucky912(at)foxmail(dot)com>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>, Andrew Dunstan <andrew(at)dunslane(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, liu xiaohui <liuxh(dot)zj(dot)cn(at)gmail(dot)com>, Steven Niu <niushiji(at)gmail(dot)com>
Subject: Re: Pasword expiration warning
Date: 2026-02-02 20:31:02
Message-ID: aYEJhk83XAqk76dP@nathan
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Here is an updated patch with the units set to seconds. There are two main
things on my mind:

* The placement of the WARNING. Right now, I have it placed at the end of
InitPostgres(). There are various other ways to get a WARNING during this
function, so I think it's technically okay, but perhaps it makes more sense
to put it at the end of ClientAuthentication() or something. But the risk
there is that something between the call to ClientAuthentication() and the
end of InitPostgres() could ERROR/FATAL, in which case our new WARNING
might be giving away more information than necessary. So, I guess I lean
towards keeping it where it is now, but I would be interested to hear other
opinions on the matter.

* Whether we should emit the warnings for special client backends.
Specifically, I think the current patch will send warnings to logical
replication connections, but not physical replication connections. My
current feeling is that we should send warnings to any backend that uses a
password to authenticate, i.e., add a call to EmitConnectionWarnings() at
the end of the "am_walsender && !am_db_walsender" block. Thoughts? Are
there any other backend types I'm forgetting that would be relevant here?

--
nathan

Attachment Content-Type Size
v14-0001-Add-password-expiration-warnings.patch text/plain 13.6 KB

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Zsolt Parragi 2026-02-02 20:33:06 Re: Use correct collation in pg_trgm
Previous Message Zsolt Parragi 2026-02-02 20:25:42 Re: Pasword expiration warning