search

MigOpsRepos / credcheck

PostgreSQL plain credential checker
MIT License
57 stars 5 forks source link

credcheck.pg_auth_history is missing #9

Closed did16 closed 1 year ago

did16 commented 1 year ago

I have installed and configured credcheck on a postgreSQL 14 cluster. I found the following issues: (1) password_valid_until does not work. I can create password without VALID UNTIL clause

(2) credcheck.pg_auth_history table is missing. ERROR: relation "credcheck.pg_auth_history" does not exist

will there be a corrective version soon ? Thanks in advance

darold commented 1 year ago

Hi,

This feature is proposed as a proof of concept in this devel version, for the moment you need to create the extension in the database you want to use this feature to create the history table. In future implementation this history table will be handled directly at shared library level and be available for all session. If you want to test it see test files test/sql/05_reuse_history.sql and test/sql/06_reuse_interval.sql.

I will try to implement the shared library code in the next few weeks.

did16 commented 1 year ago

Hi Gilles Thank you for your Reply. It would be great if the bug on the "VALID UNTIL" clause was fixed and the implementation of the "credcheck.pg_auth_history" table was done. In my firm, we are going to use credcheck extension in order to enforce security.

darold commented 1 year ago

The last commits fix the issue on VALID UNTIL clause check and move password history feature to shared memory. See README.md file and ls test/sql/0[56]* files for usage.

Please give it a try and let us know if that corresponds to your needs.

darold commented 1 year ago

A new release v1.0 have been published including this feature.