crecheck v6.0 has been released

Дата публикации: 18-10-2026 00:00:00

Antananrivo, Madagascar - October 14, 2026
PostgreSQL credcheck extension
The credcheck PostgreSQL extension provides few general credential checks, which will be evaluated during the user creation, during the password change and user renaming. By using this extension, we can define a set of rules:
allow a specific set of credentials
reject a certain type of credentials
deny password that can be easily cracked
enforce use of an expiration date with a minimum of day for a password
define a password reuse policy
define the number of authentication failure allowed before a user is banned
define a delay on authentication failures
force users to change their password after first login
throw a warning N days before when the password user is about to expire
prohibit password changes
last login and boot/shutdown information
use of authentication failure with PgBouncer
Release 6.0 has been published,
This major release adds some new features and fix issues reported by users
since last release.
Allow integration of the max_auth_failure feature with pgbouncer. See documentation.
Allow use of password_change_first_login with pgBouncer.
Add credcheck.password_valid_min setting to force a short VALID UNTIL window on newly created roles. Useful to force new users to change their password quickly when the client (DBeaver, pgAdmin, ...) does not support the error reported when credcheck.password_change_first_login is enabled.
Add an optional last-login history modelled on the Unix last(1)/wtmp. Records user sessions (name, login time, duration, backend pid, source IP and port, and optionally the last SQL query) plus PostgreSQL boot/shutdown/crash markers.
Change the behavior of the credcheck.no_password_logging to not hide the error statement anymore but instead to replace every PASSWORD '<literal>' clause with dots inplace of the literal to not expose the password in the log.
Add function pg_check_password( IN username name, IN password text ) to check a candidate password (and the associated username) against the credcheck username/password policy without creating or altering a role.
Fix privilege escalation via self ALTER ROLE when password_valid_until is set.
Fix memory leaks and a heap overflow.
Upgrade require a PostgreSQL restart to reload the credcheck library.
Complete list of changes and acknowledgements are available here
Links & Credits
credcheck is an open project under the PostgreSQL license maintained by HexaCluster.
Any contribution to build a better tool is welcome. You can send your ideas, features requests or patches
using the GitHub tools.
Links :
Download: https://github.com/HexaCluster/credcheck/releases/
Support: use GitHub report tool at https://github.com/HexaCluster/credcheck/issues
About credcheck
The credcheck extension is developed and maintained by Gilles Darold at https://hexacluster.ai. If you need more information please https://hexacluster.ai/contact-us/.
Documentation at https://github.com/HexaCluster/credcheck#readme

Основное содержимое страницы с новостью.

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	pg_utl_smtp v2.0 released	0	8.42	18-10-2026
2	pgAdmin 4 v9.18 Released	0	10.22	17-09-2026
3	pg_hint_plan v1.9.0 Released	0	9.5	18-10-2026
4	pgBackRest 2.60.0 Released	0	9.58	18-10-2026
5	powa-archivist 5.2.0 is out!	0	5	12-07-2026
6	pgsql-test: Real Postgres Testing for Faster Development Loops	0	7.47	22-09-2026
7	PgBouncer 1.26.0 released - Fixes three CVEs	0	6.66	23-09-2026
8	Perseid 0.1.0 is now available	0	7.7	14-10-2026
9	PostgreSQL 18 OIDC Authentication with Ping Identity using pg_oidc_validator	0	12.43	04-03-2026
10	PostgreSQL 19 Beta 2 Released!	5	7	16-07-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 6.38. Источник: www.postgresql.org.