PostgreSQL roles with expiring passwords

Description

This advisor checks verifies roles that have expiration dates on passwords. This ensures that application accounts do not fail due to expired passwords and prevents possible interruptions to the services offered.

If a password expires in 10 days or less, an Error flag is raised. If the password expires in more than 10 days, a Warning flag is raised instead.

Resolution

If your policy allows for it, consider extending the password expiration for the role in question. Use the following syntax to extend password expiration:

ALTER ROLE foo WITH VALID UNTIL '2023-12-25 00:00:00';

or

ALTER ROLE foo WITH PASSWORD ‘foobar’ VALID UNTIL '2023-12-25 00:00:00';

Need more support from Percona?

Percona experts bring years of experience in tackling tough database performance issues and design challenges.