vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/dws/dev/dws_04_0063.html
Lu, Huayi ef0ada5a59 DWS DEV 20240716 version 
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com>
Co-authored-by: Lu, Huayi <luhuayi@huawei.com>
Co-committed-by: Lu, Huayi <luhuayi@huawei.com>
2024-11-02 09:07:47 +00:00

386 lines
56 KiB
HTML
Raw Blame History

<a name="EN-US_TOPIC_0000001531101121"></a><a name="EN-US_TOPIC_0000001531101121"></a>
<h1 class="topictitle1">User-defined Password Policy</h1>
<div id="body8662426"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1281815193013">When creating or modifying a user, you need to specify a password. GaussDB(DWS) has default password complexity requirements. You can also define database account password policies.</p>
<div class="section" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_section6276155616306"><h4 class="sectiontitle">Default GaussDB(DWS) Password Policy</h4><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p11835143183111">By default, GaussDB(DWS) verifies the password complexity (that is, the GUC parameter <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b748498113319">password_policy</strong> is set to <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b1535551133310">1</strong> by default). The default password policy requires that the password:</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ul1183653110314"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li78360315315">Contain 8 to 32 characters.</li></ul>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ul3836203111313"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li8837931113115">Contain at least three types of the following characters: uppercase letters, lowercase letters, digits, and special characters.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li1483733163114">Cannot be the same as the user name or the user name in reverse order, case insensitive.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li158378318318">Cannot be the current password or the current password in reverse order.</li></ul>
</div>
<div class="section" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_section52112128342"><h4 class="sectiontitle">User-defined Password Policy</h4><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1356165215224">The password policy includes the password complexity requirements, password validity period, password reuse settings, password encryption mode, and password retry and lock policies. Different policy items are controlled by the corresponding GUC parameters. For details, see <a href="dws_04_0890.html">Security and Authentication (postgresql.conf)</a>.</p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_table1019624914308" frame="border" border="1" rules="all"><caption><b>Table 1 </b>User-defined password policies and corresponding GUC parameters</caption><thead align="left"><tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row2197249133013"><th align="left" class="cellrowborder" valign="top" width="17.5%" id="mcps1.3.3.3.2.6.1.1"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p14734165811452">Password Policy</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="17.5%" id="mcps1.3.3.3.2.6.1.2"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p14197174993012">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.3.2.6.1.3"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p108341838461">Description</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="35%" id="mcps1.3.3.3.2.6.1.4"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p719854910309">Value Range</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.3.2.6.1.5"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p13925443144618">Default Value in GaussDB(DWS)</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row113271001791"><td class="cellrowborder" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p43284018914">Password complexity check</p>
</td>
<td class="cellrowborder" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p33291904912">password_policy</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p365954816171">Specifies whether to check the password complexity when a <span id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_text143122717552">GaussDB(DWS)</span> account is created or modified.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.3.3.2.6.1.4 "><div class="p" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1147694514401">Integer, <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b1232815475417">0</strong> or <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b159392497414">1</strong><ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_u697584b48056419ea9e5faaecb4320ea"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_la2e19d02819d48769ccfebfecf8db608"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b8249717154215">0</strong> indicates that no password complexity policy is used. Setting this parameter to <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b5410163034220">0</strong> leads to security risks. You are advised not to set this parameter to <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b10762152194418">0</strong>.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li12802233194014"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b179361126164411">1</strong> indicates that the default password complexity policy is used.</li></ul>
</div>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.3.2.6.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p106191158471">1</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row13198194915304"><td class="cellrowborder" rowspan="6" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1919754910305">Password complexity requirement</p>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p6736135819459"></p>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p673613584454"></p>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p57368586451"></p>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p197361584459"></p>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p17737185814513"></p>
</td>
<td class="cellrowborder" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p01981849173016">password_min_length</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p31981649153010">Specifies the minimum password length.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p10232345153413">An integer ranging from 6 to 999</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.3.2.6.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1592554384616">8</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row1219814495301"><td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p9199349183010">password_max_length</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p20199194913017">Specifies the maximum password length.</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p084941483417">An integer ranging from 6 to 999</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p86181319471">32</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row17199549103020"><td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p6199174993013">password_min_uppercase</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p10199164917303">Minimum number of uppercase letters (A-Z)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ac8e8cdb3d40e4cfc83f33ee23ebd7546">An integer ranging from 0 to 999</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_u29390a83cd49414094fad7c2220baedf"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l8f404cf47536484cbd61040492d22b45"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b13565819251158">0</strong> means no requirements.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li113111038462"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b728920467469">1</strong>-<strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b1759319488461">999</strong> indicates the minimum number of uppercase letters in the password.</li></ul>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1292551613476">0</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row120044943010"><td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1820014913300">password_min_lowercase</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p02001249123016">Minimum number of lowercase letters (a-z)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a31e8387060a147d58ba8ca2850cee87d">An integer ranging from 0 to 999</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ua02658c2386448c0b73d48bef24d0712"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l448421f6ee2b463ca49d120f40d9a503"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b153971837194718">0</strong> means no requirements.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li168916514432"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b68521944104714">1</strong>-<strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b78521144164719">999</strong> indicates the minimum number of lower letters in the password.</li></ul>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p16508020154719">0</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row6200204914308"><td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p8200154963019">password_min_digital</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p420015493305">Minimum number of digits (0-9)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a13f80aece3b14e10a5e6d369d8bf9522">An integer ranging from 0 to 999</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_u5f5f6b285e234b49b04e993d4b1efeef"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l31a2474a619d4c218c3bb199050a9dda"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b1749151124814">0</strong> means no requirements.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l9b07fe4b86354dc8b2e61bf0c9ef6118"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b17806155594818">1</strong>-<strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b137352011498">999</strong> indicates the minimum number of digits in the password.</li></ul>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1283224194712">0</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row52003498301"><td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p112011549193018">password_min_special</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p182017494304">Minimum number of special characters (<strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b10529298941158">password_min_special</strong>)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a0b6544ffccd140e7b63cfeeca471d346">An integer ranging from 0 to 999</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_u0dcd92b62ff5498794ac7b71b2f25d8c"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l7ee939ed477641a99e3b76e1af87611c"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b3683101264910">0</strong> means no requirements.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li857662895214"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b185905307496">1</strong>-<strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b10376833114915">999</strong> indicates the minimum number of special characters in the password.</li></ul>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p13926174313463">0</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row78841125154711"><td class="cellrowborder" rowspan="2" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p2088512524711">Password validity</p>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p20886152514717"></p>
</td>
<td class="cellrowborder" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1847152718482">password_effect_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ae9cf15ae84454164aef05826c7eaaba2">Password validity period When the number of days in advance a user is notified that the password is about to expire reaches the value of <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b159437378501">password_notify_time</strong>, the system prompts the user to change the password when the user logs in to the database.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a543a1a821a034992a698f47fdd6c69ca">The value is a floating point number ranging from 0 to 999. The unit is day.</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_udf25f051463543b1ab5d36d8d0185a41"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l3540aab4c9234f13a20079a3edd37d3b"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b5257378841158">0</strong> indicates the validity period is disabled.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li2969182411532">A floating point number from 1 to 999 indicates the validity period of the password. When the password is about to expire or has expired, the system prompts the user to change the password.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.3.2.6.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p189271243154613">90</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row19886425164715"><td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p18885025134712">password_notify_time</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p4886162518475">Specifies for how many days you are reminded of the password expiry.</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a20481a932b404bd5a403ba802046efa8">The value is an integer ranging from 0 to 999. The unit is day.</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_u2ea69d68c3cf40bfa8f13747710c6ecd"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l634b3abfe3274a4ba0f7115869935645"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b18833933021158">0</strong> indicates the reminder is disabled.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li1937775035716">A value ranging from 1 to 999 indicates the number of days prior to password expiration that a user will receive a notification.</li></ul>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p12946183618472">7</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row4887182516476"><td class="cellrowborder" rowspan="2" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p138871625114716">Password reuse settings</p>
</td>
<td class="cellrowborder" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p76027411351">password_reuse_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p158872025124719">Specifies the number of days after which the password cannot be reused.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a296e83f968604830a15e9764ac21aa72">A Floating point number ranging from 0 to 3650. The unit is day.</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_u1e64b12c6f444173b8207e9e18d63221"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l95d4ac4127be4e41a934bfe422abcf98"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b12510897771158">0</strong> indicates that the password reuse days are not checked.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_lf9cf65f9e97f4bef927bcfb6e8542a53">A positive number indicates that the new password cannot be chosen from passwords in history that are newer than the specified number of days.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.3.2.6.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p0927174318465">60</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row288852554715"><td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p136033411751">password_reuse_max</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1388892519474">Specifies the number of the most recent passwords that the new password cannot be chosen from.</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a0485b70193344cdeb7b278f802386372">An integer ranging from 0 to 1000</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_uca565f077acf44c6ad5949061c29608d"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_lb6982604599147448f583529ea56f186"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b18876845041158">0</strong> indicates that the password reuse times are not checked.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l393880ef56be4c38bfb0437389c94545">A positive number indicates that the new password cannot be chosen from the specified number of the most recent passwords.</li></ul>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p79271343184610">0</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row7888192519471"><td class="cellrowborder" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p1888852594719">Encryption mode</p>
</td>
<td class="cellrowborder" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p11842123652411">password_encryption_type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p126971242152418">Specifies the password storage encryption mode.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p537510552203">0, 1, 2</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ucf6340a5f1ff4877a5549178fcdd5327"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l78ce25ee9b7940b084ed7c1b9e7a7718"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b6690212071158">0</strong> indicates that passwords are encrypted in MD5 mode. The password is encrypted using MD5. This mode is not recommended for users.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li731613248552"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b1597975161612">1</strong> indicates that passwords are encrypted with SHA-256, which is compatible with the MD5 user authentication method of the PostgreSQL client. The password is stored in ciphertext encrypted by MD5 and SHA256.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l33a31388b1ea4819aa03c6ba8bbfaf60"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b7620717931158">2</strong> indicates that passwords are encrypted using SHA-256. The password is encrypted using SHA256.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.3.2.6.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a959e6d4e2678482199947467e088006c">1</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row17889925104713"><td class="cellrowborder" rowspan="2" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p68891625114715">Retry and lock</p>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p134801419145313"></p>
</td>
<td class="cellrowborder" valign="top" width="17.5%" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p18890112515478">password_lock_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p118898251475">Specifies the duration for a locked account to be automatically unlocked.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ac6d6390ccf484acebea31f3e850b3acb">A Floating point number ranging from 0 to 365. The unit is day.</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_u5a7cfddea7c94de5ac8eed2eb726cc6d"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_led7d9d51541e4d41ad4f757986bed67b"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b123836481313">0</strong> indicates that the account is not automatically locked if the password verification fails.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_le058156bf4c54c51bcc9796540ce63f2">A positive number indicates the duration after which a locked account is automatically unlocked.<div class="note" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_note26161329195817"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p186164298586">The integral part of the value of the <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b58641231124320">password_lock_time</strong> parameter indicates the number of days and its decimal part can be converted into hours, minutes, and seconds.</p>
</div></div>
</li></ul>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.3.2.6.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p15659182195514">1</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_row114791019135311"><td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p89141343155511">failed_login_attempts</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p10480131917532">If the number of incorrect password attempts reaches the value of failed_login_attempts, the account is locked and will be automatically unlocked in X (which indicates the value of password_lock_time) seconds.</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a0224277f9a664877b46f18d4c758d355">An integer ranging from 0 to 1000</p>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_u2bb51f329fe045138ae839bee1b2a455"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_lb312d482a3854183bf40917bf659c12a"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b20520221681158">0</strong> indicates that the automatic locking function does not take effect.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_l65f61253bf434234ae28fc8ccbc0df02">A positive number indicates that an account is locked when the number of incorrect password attempts reaches the value of <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b15987373451158">failed_login_attempts</strong>.</li></ul>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.3.2.6.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p17308142685619">10</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_t4898d0ad2fc048f18baef73bbeacb95b" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Special characters</caption><thead align="left"><tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_re6f8aae422fb4767b70e9ca4abc4680f"><th align="left" class="cellrowborder" valign="top" width="10.068993100689932%" id="mcps1.3.3.4.2.9.1.1"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a22fce215a5f447f78637f0402f492b84">No.</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10.898910108989101%" id="mcps1.3.3.4.2.9.1.2"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a80accb4ed15c4627b90d56f5092ab08a"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b13635251561158">Character</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="12.90870912908709%" id="mcps1.3.3.4.2.9.1.3"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a13c4100c70654ba2b316a9473df9a3ac">No.</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="12.088791120887912%" id="mcps1.3.3.4.2.9.1.4"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a8df92dba388c4fc6aed2b8fb66e5df20"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b11817859161158">Character</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="13.828617138286173%" id="mcps1.3.3.4.2.9.1.5"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a188cb468368e40269ab7e48593c98671">No.</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="11.998800119988001%" id="mcps1.3.3.4.2.9.1.6"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a28e6e0e14f7349d59b5483a180c426f5"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b15588590231158">Character</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="15.108489151084893%" id="mcps1.3.3.4.2.9.1.7"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_af2daaf19667f4fbfbe4ebf1de2c52e17">No.</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="13.0986901309869%" id="mcps1.3.3.4.2.9.1.8"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_acf159d5811c74de9994500a2f23f4a65"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b20906314511158">Character</strong></p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_r3513940bd57a466882abc4ed8cc05b9f"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.3.4.2.9.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a0660ef4ebf154c77ae034272341eb47c">1</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.3.4.2.9.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a7ccb32e54f8c4e3bac0e5c5490b28688">~</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.3.4.2.9.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a1078fa3cdd21495f80eb0e7f24e1429b">9</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.3.4.2.9.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_afdac8201353c4eecb396e6246de223a4">*</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.3.4.2.9.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a57e5294bcbc74102807a35984be8c596">17</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.3.4.2.9.1.6 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a5c9b3c2bb401473bab8c8108ea5ffb1b">|</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.3.4.2.9.1.7 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_acac04f6977de4a678639ffb06b1d093d">25</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.3.4.2.9.1.8 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a20c1fdc1b5c143b29e76e7f96db7b43c">&lt;</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_r24ab77b528ef46e2b78c5271fc68a6d5"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.3.4.2.9.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ab895621791334d24ada4848103e7bd26">2</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.3.4.2.9.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a36f61f6e579d4ada9f31d24fd89e7c3e">!</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.3.4.2.9.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a77866492e86646138ce4913de62dc85d">10</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.3.4.2.9.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_aec0497a2a09b47f88e97cebec2ef7afd">(</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.3.4.2.9.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a2b946aa9f9ba4ba0b1b402f356882674">18</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.3.4.2.9.1.6 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_aefcd63e306f14a49be1e17a1e667a9d6">[</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.3.4.2.9.1.7 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a8bc1093469474b439857092f350cf06a">26</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.3.4.2.9.1.8 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ad74af390cf534c18a9eaaa0dd93a4857">.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_rb9ec50c68821429ba5800f35f721d3e3"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.3.4.2.9.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a42ef8bdb73a14766b4030cf2485b8028">3</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.3.4.2.9.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a6c9d9688b58747019acb58eefac1cdb7">@</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.3.4.2.9.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a8f1c604e1d314c4cac0784942d6f2e2e">11</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.3.4.2.9.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a01d8a4454ed049168b622122f025ee35">)</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.3.4.2.9.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ab458c500fe314349a9650035a34efc95">19</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.3.4.2.9.1.6 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a0650609352bd4774b25cb8a9c80d5eb9">{</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.3.4.2.9.1.7 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_abc729ff4b0ec4d638bbb58e5f6cfd40b">27</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.3.4.2.9.1.8 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_aa2e1401d8d23440fb748f6f1e27998ee">&gt;</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_r115a34eca49444f5bb8a445a8c11f494"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.3.4.2.9.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ab3fa56dabfc0496daec7a9822a766fb7">4</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.3.4.2.9.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a20b6326f52b84a1ebe64e23a24b27a03">#</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.3.4.2.9.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ad97eb15a657d4e34ba69cb47ecedb87e">12</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.3.4.2.9.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a8860f62566c04f5a99bc5217d8c0070e">-</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.3.4.2.9.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a84987f893d2c462fa946824df4c8cee8">20</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.3.4.2.9.1.6 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_aef3bab21677c4a2f8c53238f8e2a1cba">}</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.3.4.2.9.1.7 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a23aa1f43b5de4ba7a1c65ce5e39edd17">28</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.3.4.2.9.1.8 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a1bb289bd446040cbaf370927829b876f">/</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_re06f0bf1ab764a6a8dc61483bd8b730c"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.3.4.2.9.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_abdb9b49a97814616ada2ec42e9fc15cb">5</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.3.4.2.9.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a5c25357a8b5244639e53b40099de4dea">$</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.3.4.2.9.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_aa329c4502b8348aea3b6a2ea2c464922">13</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.3.4.2.9.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a1f6bcddc4a864caf84f38403dc2b5d9f">_</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.3.4.2.9.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a2200883a403648f586afabe8f579c1b0">21</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.3.4.2.9.1.6 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ab52147ecdd5b4a5da0c697f67b833158">]</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.3.4.2.9.1.7 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a68b2d5addae845448ab67c8c3227f551">29</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.3.4.2.9.1.8 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ab1c4819a47474007ba040849b5efe815">?</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_rc96a86406102457ba4fd7b50ba1d5515"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.3.4.2.9.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ac0bf85b1615a4985b59352567f300f00">6</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.3.4.2.9.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a83b7fccf47f7433c802f052af98d76ce">%</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.3.4.2.9.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a96d428ce99cb4407b14089f8b93fe561">14</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.3.4.2.9.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_af6bb337cf03a4cf3a43d25729410080b">=</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.3.4.2.9.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_af806fdd50c594ef99a6c617c0692b668">22</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.3.4.2.9.1.6 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a9b4610771ea84874b9ffc96c21020e47">;</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.3.4.2.9.1.7 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_add15f8717bbb4e6ca639de6993b04620">-</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.3.4.2.9.1.8 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_aabcb84ab30d043a0bf1d6cd478e6193d">-</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_r880af2411708430eacbb776af98bf7d9"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.3.4.2.9.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_af67bf4bdee5545b38040dd25f71695d4">7</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.3.4.2.9.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a1755ddd8f15d4405aa1d905eea673416">^</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.3.4.2.9.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ada1ac1d7108a4b3bba346f8b655de79e">15</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.3.4.2.9.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a5f3f3a5ff58a49268fd9354796e0b6c9">+</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.3.4.2.9.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_afef4a86c2a6f4742be3b7115181704bf">23</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.3.4.2.9.1.6 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ad3898725686345cfb2759fb0a0f72269">:</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.3.4.2.9.1.7 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a5ce8d21b7bd04e2ea032b2d42ba3c9f0">-</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.3.4.2.9.1.8 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_afbc61c982d474f068c998ffee7e3c2a2">-</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_r7ba2ccd041d243f5a783a516f24c52b6"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.3.4.2.9.1.1 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a52e3b29cd208442db6261d0d948c912c">8</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.3.4.2.9.1.2 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a721c0b38a3a54b48bc4aeb226e29c127">&amp;</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.3.4.2.9.1.3 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a496f78fde83b4283ab8f1e08fd04a245">16</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.3.4.2.9.1.4 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a704a26bace504f8a8a6bc89939098ace">\</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.3.4.2.9.1.5 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a0439a4727831430a960b97e981be9bcc">24</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.3.4.2.9.1.6 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a3443a7fcc1964d4e8fb4b0a9b5b1c172">,</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.3.4.2.9.1.7 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_a43c9ff45ae96416f9b371dfd0e5bbd77">-</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.3.4.2.9.1.8 "><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ae0c110e70a2e4f0481ab26409d433ce6">-</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_section32631040161015"><h4 class="sectiontitle">Example of User-defined Password Policies</h4><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p869514603413"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b828371710139">Example 1: Configure the password complexity parameter password_policy.</strong></p>
<ol id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ol1697517319412"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li1397553194114">Log in to the GaussDB(DWS) management console.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li39761531184114">In the navigation pane on the left, choose <span class="uicontrol" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_uicontrol20916127491158"><b>Clusters</b></span>.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li397613316412">In the cluster list, find the target cluster and click the cluster name. The <span class="wintitle" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_wintitle3816075251158"><b>Cluster Information</b></span> page is displayed.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li12976183114110">Click the <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b641891503716">Parameters </strong>tab, change the value of <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b1143192716370">password_policy</strong>, and click <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b14155105218418">Save</strong>. The <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b834931554215">password_policy</strong> parameter takes effect immediately after being modified. You do not need to restart the cluster.</li></ol>
<div class="fignone" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_fig184541214013"><span class="figcap"><b>Figure 1 </b>password_policy</span><br><span><img id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_image084551215400" src="figure/en-us_image_0000001525363781.png" height="85.2929" width="492.1" title="Click to enlarge" class="imgResize"></span></div>
</div>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_p3621640154910"><strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b1357012291131">Example 2: Configure password_effect_time for password validity period.</strong></p>
<ol id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ol111855107505"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li718513104503">Log in to the GaussDB(DWS) management console.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li1618620103505">In the navigation pane on the left, choose <span class="uicontrol" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_uicontrol13175150161158"><b>Clusters</b></span>.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li1018621085017">In the cluster list, find the target cluster and click the cluster name. The <span class="wintitle" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_wintitle20038069481158"><b>Cluster Information</b></span> page is displayed.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_li13186101055016">Click the<strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b4973194071713"> Parameters</strong> tab, change the value of <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b10392503179">password_effect_time</strong>, and click <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b17135195661717">Save</strong>. The modification of <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b19498181161815">password_effect_time</strong> takes effect immediately. You do not need to restart the cluster.<div class="fignone" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_fig13110012155911"><span class="figcap"><b>Figure 2 </b>password_effect_time</span><br><span><img id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_image6110191217598" src="figure/en-us_image_0000001474723824.png" height="184.65720000000002" width="492.1" title="Click to enlarge" class="imgResize"></span></div>
</li></ol>
<div class="section" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_section1897910435417"><h4 class="sectiontitle">Setting and Changing a Password</h4><ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_u7069227b30fd4c77a3f1481f0f6fbd63"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l56fde9f43f62427c9177cafad4bfb232">Both system administrators and common users need to periodically change their passwords to prevent the accounts from being stolen.<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_a15478e2074e3436db2c71e3b0ee2bf96"><a name="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l56fde9f43f62427c9177cafad4bfb232"></a><a name="en-us_topic_0000001188482292_en-us_topic_0000001082926733_l56fde9f43f62427c9177cafad4bfb232"></a>For example, to change the password of the user <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b19149669721159">user1</strong>, connect to the database as the administrator and run the following command:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_s1aa0fa851c7f45c9aac01f563e469336"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">ALTER</span><span class="w"> </span><span class="k">USER</span><span class="w"> </span><span class="n">user1</span><span class="w"> </span><span class="n">IDENTIFIED</span><span class="w"> </span><span class="k">BY</span><span class="w"> </span><span class="s1">'newpassword'</span><span class="w"> </span><span class="k">REPLACE</span><span class="w"> </span><span class="s1">'oldpassword'</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<div class="note" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_nae34ea504ab547319c8520391296586a"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_aa52880f201c54bf780b49e3eb096947d">The password must meet input requirements, or the execution will fail.</p>
</div></div>
</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l55469bb0777f44fdaf5eb9f226a0d15f">An administrator can change its own password and other accounts' passwords. With the permission for changing other accounts' passwords, the administrator can resolve a login failure when a user forgets its password.<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_acb5e229c45734327a3d56725c4412588"><a name="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l55469bb0777f44fdaf5eb9f226a0d15f"></a><a name="en-us_topic_0000001188482292_en-us_topic_0000001082926733_l55469bb0777f44fdaf5eb9f226a0d15f"></a>To change the password of the user <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b7579910481159">joe</strong>, run the following command:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_sb35feef793234fc0afec59e5547d1fa2"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">ALTER</span><span class="w"> </span><span class="k">USER</span><span class="w"> </span><span class="n">joe</span><span class="w"> </span><span class="n">IDENTIFIED</span><span class="w"> </span><span class="k">BY</span><span class="w"> </span><span class="s1">'password'</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li></ul>
<div class="note" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_n0957be67007e43b18758db49bfd1b9af"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_uc141e50e188c4c17a943b1c740f783b3"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l07b1b859d4204c2194812ed2e552db96">System administrators are not allowed to change passwords for each other.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l700a12257f974f6a952a1be4772c9a65">When a system administrator changes the password of a common user, the original password is not required.</li><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l0d99cc1240744fdb8127e0e6c148556c">However, when a system administrator changes its own password, the original password is required.</li></ul>
</div></div>
<ul id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_ul122131692710"><li id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l8273e67d4414433eaf32c971f88ff4ad">Password verification<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_af8a1024508c54a92985aa45497532fd9"><a name="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_l8273e67d4414433eaf32c971f88ff4ad"></a><a name="en-us_topic_0000001188482292_en-us_topic_0000001082926733_l8273e67d4414433eaf32c971f88ff4ad"></a>Password verification is required when you set the user or role in the current session. If the entered password is inconsistent with the stored password of the user, an error is reported.</p>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_ab8256505d9ba4b3e9917e9aa29bfd8bc">To set the password of the user <strong id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_b1858820721159">joe</strong>, run the following command:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_s31ad823d6c7d437fbc392c994dfa1109"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">SET</span><span class="w"> </span><span class="k">ROLE</span><span class="w"> </span><span class="n">joe</span><span class="w"> </span><span class="n">PASSWORD</span><span class="w"> </span><span class="s1">'password'</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_p62246005152322">If the following information is displayed, the role setting has been modified:</p>
<pre class="screen" id="EN-US_TOPIC_0000001531101121__en-us_topic_0000001188482292_en-us_topic_0000001082926733_screen36222197152521">SET ROLE</pre>
</li></ul>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="dws_04_0053.html">Managing Users and Their Permissions</a></div>
</div>
</div>
<script language="JavaScript">
<!--
image_size('.imgResize');
var msg_imageMax = "view original image";
var msg_imageClose = "close";
//--></script>
View Git Blame Copy Permalink