Creating a new profile v15
Use the CREATE PROFILE
command to create a new profile. The syntax is:
Include the LIMIT
clause and one or more space-delimited parameter/value pairs to specify the rules enforced by EDB Postgres Advanced Server.
Parameters
profile_name
specifies the name of the profile.parameter
specifies the attribute limited by the profile.value
specifies the parameter limit.
EDB Postgres Advanced Server supports the vollowing value
for each parameter
:
FAILED_LOGIN_ATTEMPTS
specifies the number of failed login attempts that a user can make before the server locks them out of their account for the length of time specified by PASSWORD_LOCK_TIME
. Supported values are:
- An
INTEGER
value greater than0
. DEFAULT
— The value ofFAILED_LOGIN_ATTEMPTS
specified in theDEFAULT
profile.UNLIMITED
— The connecting user can make an unlimited number of failed login attempts.
PASSWORD_LOCK_TIME
specifies the length of time that must pass before the server unlocks an account that was locked because of FAILED_LOGIN_ATTEMPTS
. Supported values are:
- A
NUMERIC
value greater than or equal to 0. To specify a fractional portion of a day, specify a decimal value. For example, use the value4.5
to specify 4 days, 12 hours. DEFAULT
— The value ofPASSWORD_LOCK_TIME
specified in theDEFAULT
profile.UNLIMITED
— The account is locked until a database superuser manually unlocks it.
PASSWORD_LIFE_TIME
specifies the number of days that the current password can be used before the user is prompted to provide a new password. Include the PASSWORD_GRACE_TIME
clause when using the PASSWORD_LIFE_TIME
clause to specify the number of days that pass after the password expires before connections by the role are rejected. If you don't specify PASSWORD_GRACE_TIME
, the password expires on the day specified by the default value of PASSWORD_GRACE_TIME
, and the user can't execute any command until they provide a new password. Supported values are:
- A
NUMERIC
value greater than or equal to 0. To specify a fractional portion of a day, specify a decimal value. For example, use the value4.5
to specify 4 days, 12 hours. DEFAULT