vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/dws/dev/dws_04_0890.html
Lu, Huayi e6fa411af0 DWS DEV 830.201 version 
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com>
Co-authored-by: Lu, Huayi <luhuayi@huawei.com>
Co-committed-by: Lu, Huayi <luhuayi@huawei.com>
2024-05-16 07:24:04 +00:00

326 lines
53 KiB
HTML
Raw Blame History

<a name="EN-US_TOPIC_0000001188163626"></a><a name="EN-US_TOPIC_0000001188163626"></a>
<h1 class="topictitle1">Security and Authentication (postgresql.conf)</h1>
<div id="body8662426"><p id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_p11527581314">This section describes parameters about how to securely authenticate the client and server.</p>
<div class="section" id="EN-US_TOPIC_0000001188163626__sce830baddcd14b33a7a6700e27937abf"><h4 class="sectiontitle">authentication_timeout</h4><p id="EN-US_TOPIC_0000001188163626__affc6c27a3c6448ffb2843f5e61eae95d"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_en-us_topic_0058967753_b41120256">Parameter description</strong>: Specifies the longest duration to wait before the client authentication times out. If a client is not authenticated by the server within the timeout period, the server automatically breaks the connection from the client so that the faulty client does not occupy connection resources.</p>
<p id="EN-US_TOPIC_0000001188163626__p727782016135"><strong id="EN-US_TOPIC_0000001188163626__b14534171794511">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__a36dc89e8d4924406add9e4eebff8ab09"><strong id="EN-US_TOPIC_0000001188163626__b1265223112433">Value range</strong>: an integer ranging from 1 to 600. The minimum unit is second (s).</p>
<p id="EN-US_TOPIC_0000001188163626__a64ef6e91cdaa40d9b8e67d32d70bb316"><strong id="EN-US_TOPIC_0000001188163626__b842352706185119">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778244_b15310055141954">1min</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s7086b76ae0224deaa57a373bffdb2cd4"><h4 class="sectiontitle">session_timeout</h4><p id="EN-US_TOPIC_0000001188163626__a65fd2184ace34d97b2a0687ab4e37059"><strong id="EN-US_TOPIC_0000001188163626__b1828101802417">Parameter description</strong>: Specifies the longest duration with no operations after the connection to the server.</p>
<p id="EN-US_TOPIC_0000001188163626__p17710210161613"><strong id="EN-US_TOPIC_0000001188163626__b55090196459">Type</strong>: USERSET</p>
<p id="EN-US_TOPIC_0000001188163626__a09a71366f2b040d6ae2a70b893186868"><strong id="EN-US_TOPIC_0000001188163626__b842352706204447">Value range</strong>: an integer ranging from 0 to 86400. The minimum unit is second (s). <strong id="EN-US_TOPIC_0000001188163626__b84235270620458">0</strong> means to disable the timeout.</p>
<p id="EN-US_TOPIC_0000001188163626__adc0a1206ddb24871bd8f94618569b424"><strong id="EN-US_TOPIC_0000001188163626__b17505192220213">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b18505182219218">10 min</strong></p>
<div class="notice" id="EN-US_TOPIC_0000001188163626__nea2f24e1ae734d76bc9b119dbf7113e9"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="EN-US_TOPIC_0000001188163626__ul671116165720"><li id="EN-US_TOPIC_0000001188163626__li187111710575">The gsql client of <span id="EN-US_TOPIC_0000001188163626__text51909278">GaussDB(DWS)</span> has an automatic reconnection mechanism. If the initialized local connection of a user to the server times out, gsql disconnects from and reconnects to the server.</li><li id="EN-US_TOPIC_0000001188163626__li6344177165713">Connections from the pooler connection pool to other CNs and DNs are not controlled by the <strong id="EN-US_TOPIC_0000001188163626__b143365525113">session_timeout</strong> parameter.</li></ul>
</div></div>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s0742999cbaad4392a0a66f168e83398c"><h4 class="sectiontitle">ssl_ciphers</h4><p id="EN-US_TOPIC_0000001188163626__a40b610aa990b4b8ca6d0008068528ab8"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_aee607761efca4160868d59583c52fa7e">Parameter description</strong>: Specifies the encryption algorithm list supported by the SSL.</p>
<p id="EN-US_TOPIC_0000001188163626__p2345191112515"><strong id="EN-US_TOPIC_0000001188163626__b13751520184516">Type</strong>: POSTMASTER</p>
<p id="EN-US_TOPIC_0000001188163626__a6baa0bd7e85449f7a91b8f7a1f26fe18"><strong id="EN-US_TOPIC_0000001188163626__b166421341041">Value range</strong>: a string. Separate multiple encryption algorithms with semicolons (;). </p>
<p id="EN-US_TOPIC_0000001188163626__aae84c198aa6f4f08b9136c484ebbb400"><strong id="EN-US_TOPIC_0000001188163626__b2012012131341">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b51216134414">ALL</strong></p>
<div class="note" id="EN-US_TOPIC_0000001188163626__note1078975013110"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="EN-US_TOPIC_0000001188163626__ul321613417133"><li id="EN-US_TOPIC_0000001188163626__li4849172582211">The default value of <strong id="EN-US_TOPIC_0000001188163626__b146612294225">ssl_ciphers</strong> is <strong id="EN-US_TOPIC_0000001188163626__b542373462219">ALL</strong>, indicating that all the following encryption algorithms are supported. Users are advised to retain the default value, unless there are other special requirements on the encryption algorithm.<ul id="EN-US_TOPIC_0000001188163626__ul1578411461719"><li id="EN-US_TOPIC_0000001188163626__li1667753110137">TLS1_3_RFC_AES_128_GCM_SHA256</li><li id="EN-US_TOPIC_0000001188163626__li2091373231315">TLS1_3_RFC_AES_256_GCM_SHA384</li><li id="EN-US_TOPIC_0000001188163626__li1234153621312">TLS1_3_RFC_CHACHA20_POLY1305_SHA256</li><li id="EN-US_TOPIC_0000001188163626__li1841243719138">TLS1_3_RFC_AES_128_CCM_SHA256</li><li id="EN-US_TOPIC_0000001188163626__la226f0b6f6c040c29e011c10c109139c">TLS1_3_RFC_AES_128_CCM_8_SHA256</li></ul>
</li><li id="EN-US_TOPIC_0000001188163626__li22171542130">Currently, SSL connection authentication supports only the TLS1.3 encryption algorithm, which has better performance and security. It is also compatible with SSL connection authentication between clients that comply with TLS1.2.</li></ul>
</div></div>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s6fec625af84c4e5ab66d1731d270f22b"><h4 class="sectiontitle">ssl_renegotiation_limit</h4><p id="EN-US_TOPIC_0000001188163626__a182a4c15d39a4a24b2f205e7f6ccb03f"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_a3d4c28655aba4ee29f293b53d46b3ba1">Parameter description</strong>: Specifies the traffic volume over the SSL-encrypted channel before the session key is renegotiated. The renegotiation traffic limitation mechanism reduces the probability that attackers use the password analysis method to crack the key based on a huge amount of data but causes big performance losses. The traffic indicates the sum of sent and received traffic.</p>
<p id="EN-US_TOPIC_0000001188163626__p777214359165"><strong id="EN-US_TOPIC_0000001188163626__b20877120204513">Type</strong>: USERSET</p>
<div class="note" id="EN-US_TOPIC_0000001188163626__note11998020131414"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="EN-US_TOPIC_0000001188163626__p1853316399306">You are advised to retain the default value, that is, disable the renegotiation mechanism. You are not advised to use the <strong id="EN-US_TOPIC_0000001188163626__b204674514101">gs_guc</strong> tool or other methods to set the <strong id="EN-US_TOPIC_0000001188163626__b9686134100">ssl_renegotiation_limit</strong> parameter in the <strong id="EN-US_TOPIC_0000001188163626__b5982122031010">postgresql.conf</strong> file. The setting does not take effect.</p>
</div></div>
<p id="EN-US_TOPIC_0000001188163626__aac6ce1acfd8544cf9724d1da94365b4c"><strong id="EN-US_TOPIC_0000001188163626__b1316119383446">Value range</strong>: an integer ranging from 0 to <strong id="EN-US_TOPIC_0000001188163626__b11979145834416">INT_MAX</strong>. The unit is KB. <strong id="EN-US_TOPIC_0000001188163626__b842352706173359">0</strong> indicates that the renegotiation mechanism is disabled.</p>
<p id="EN-US_TOPIC_0000001188163626__a9e96827e5e37425cb22d8f3bcec9b4b3"><strong id="EN-US_TOPIC_0000001188163626__b5735075">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b842352706171333">0</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s66e18c0433544eefaa5369459d6b220a"><h4 class="sectiontitle">password_policy</h4><p id="EN-US_TOPIC_0000001188163626__aad2b7fac24ad49b0abfed1fbc188d7f0"><strong id="EN-US_TOPIC_0000001188163626__b825354011420">Parameter description</strong>: Specifies whether to check the password complexity when you run the <strong id="EN-US_TOPIC_0000001188163626__b102595401446">CREATE ROLE/USER</strong> or <strong id="EN-US_TOPIC_0000001188163626__b4259174016420">ALTER ROLE/USER</strong> command to create or modify a <span id="EN-US_TOPIC_0000001188163626__text1359377587">GaussDB(DWS)</span> account.</p>
<p id="EN-US_TOPIC_0000001188163626__p1345516265239"><strong id="EN-US_TOPIC_0000001188163626__b8440423144517">Type</strong>: SIGHUP</p>
<div class="notice" id="EN-US_TOPIC_0000001188163626__nffa7a21a10a949c681bac168c79c0a16"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="EN-US_TOPIC_0000001188163626__a813de7415b2f4079a9429f46a1b656a1">For security purposes, do not disable the password complexity policy.</p>
</div></div>
<p id="EN-US_TOPIC_0000001188163626__a5c71c4ec624b4db5922095c21b0a0fcf"><strong id="EN-US_TOPIC_0000001188163626__b66499804">Value range</strong>: an integer, <strong id="EN-US_TOPIC_0000001188163626__b842352706111635">0</strong> or <strong id="EN-US_TOPIC_0000001188163626__b842352706111638">1</strong></p>
<ul id="EN-US_TOPIC_0000001188163626__u697584b48056419ea9e5faaecb4320ea"><li id="EN-US_TOPIC_0000001188163626__la2e19d02819d48769ccfebfecf8db608"><strong id="EN-US_TOPIC_0000001188163626__b176848255134549">0</strong> indicates that no password complexity policy is enabled.</li><li id="EN-US_TOPIC_0000001188163626__l5e49744c570143b08c97031226c2cec2"><strong id="EN-US_TOPIC_0000001188163626__ac4a71b0e13b64122b4edcb8c101652c4">1</strong> indicates that the default password complexity policy is disabled.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__afab54009b43849cb885fb93580c05f11"><strong id="EN-US_TOPIC_0000001188163626__a4c25757a8859417e8d363ca9016b506c">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0058967566_b56157513619462">1</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__sbbafd6b400d246ad9b10b95fd632643c"><a name="EN-US_TOPIC_0000001188163626__sbbafd6b400d246ad9b10b95fd632643c"></a><a name="sbbafd6b400d246ad9b10b95fd632643c"></a><h4 class="sectiontitle">password_reuse_time</h4><p id="EN-US_TOPIC_0000001188163626__af592be33e34b450da67c0f519d3ca36d"><strong id="EN-US_TOPIC_0000001188163626__b4546792291624">Parameter description:</strong> Specifies whether to check the reuse days of the new password when you run the <strong id="EN-US_TOPIC_0000001188163626__b3082399791624">ALTER USER</strong> or <strong id="EN-US_TOPIC_0000001188163626__b3555929791624">ALTER ROLE</strong> command to change a user password.</p>
<p id="EN-US_TOPIC_0000001188163626__p83506149239"><strong id="EN-US_TOPIC_0000001188163626__b063932304516">Type</strong>: SIGHUP</p>
<div class="notice" id="EN-US_TOPIC_0000001188163626__n6490ed2389ef4d0bab4609c6d12bb219"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="EN-US_TOPIC_0000001188163626__p67333441426">When you change the password, the system checks the values of <a href="#EN-US_TOPIC_0000001188163626__sbbafd6b400d246ad9b10b95fd632643c">password_reuse_time</a> and <a href="#EN-US_TOPIC_0000001188163626__scadaeaf8f1ee4427b11857bcd78cb191">password_reuse_max</a>.</p>
<ul id="EN-US_TOPIC_0000001188163626__ul13734194464216"><li id="EN-US_TOPIC_0000001188163626__li1852615215432">If the values of <strong id="EN-US_TOPIC_0000001188163626__b1427052424611">password_reuse_time</strong> and <strong id="EN-US_TOPIC_0000001188163626__b8443172974615">password_reuse_max</strong> are both positive numbers, the password can be reused if either of the following conditions is met:</li><li id="EN-US_TOPIC_0000001188163626__li973454484219">If the value of <strong id="EN-US_TOPIC_0000001188163626__b956482204710">password_reuse_time</strong> is <strong id="EN-US_TOPIC_0000001188163626__b597410442502">0</strong>, the days of password reuse are not limited and only the times of password reuse are limited.</li><li id="EN-US_TOPIC_0000001188163626__li167348447425">If the value of <strong id="EN-US_TOPIC_0000001188163626__b1379212194711">password_reuse_max</strong> is <strong id="EN-US_TOPIC_0000001188163626__b8155446195218">0</strong>, the times of password reuse are not limited and only the days of password reuse are limited.</li><li id="EN-US_TOPIC_0000001188163626__li1873474416422">If the values of <strong id="EN-US_TOPIC_0000001188163626__b9905104415475">password_reuse_time</strong> and <strong id="EN-US_TOPIC_0000001188163626__b973103414473">password_reuse_max</strong> are both <strong id="EN-US_TOPIC_0000001188163626__b801046185311">0</strong>, password reuse is not limited.</li></ul>
</div></div>
<p id="EN-US_TOPIC_0000001188163626__a296e83f968604830a15e9764ac21aa72"><strong id="EN-US_TOPIC_0000001188163626__b452233516510">Value range</strong>: a floating number ranging from 0 to 3650. The unit is day.</p>
<ul id="EN-US_TOPIC_0000001188163626__u1e64b12c6f444173b8207e9e18d63221"><li id="EN-US_TOPIC_0000001188163626__l95d4ac4127be4e41a934bfe422abcf98"><strong id="EN-US_TOPIC_0000001188163626__b17817453165312">0</strong> indicates that the password reuse days are not checked.</li><li id="EN-US_TOPIC_0000001188163626__lf9cf65f9e97f4bef927bcfb6e8542a53">A positive number indicates that the new password cannot be the one that is used within the specified days.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__a95bce48e12a044c3b7c7ff06792b27c8"><strong id="EN-US_TOPIC_0000001188163626__b27385108834549">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b842352706171519">60</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__scadaeaf8f1ee4427b11857bcd78cb191"><a name="EN-US_TOPIC_0000001188163626__scadaeaf8f1ee4427b11857bcd78cb191"></a><a name="scadaeaf8f1ee4427b11857bcd78cb191"></a><h4 class="sectiontitle">password_reuse_max</h4><p id="EN-US_TOPIC_0000001188163626__a5afb963054cf4b699602ed98207e6435"><strong id="EN-US_TOPIC_0000001188163626__b3967750491624">Parameter description:</strong> Specifies whether to check the reuse times of the new password when you run the <strong id="EN-US_TOPIC_0000001188163626__b1077670391624">ALTER USER</strong> or <strong id="EN-US_TOPIC_0000001188163626__b4850188091624">ALTER ROLE</strong> command to change a user password.</p>
<p id="EN-US_TOPIC_0000001188163626__p10187185314226"><strong id="EN-US_TOPIC_0000001188163626__b3768132314510">Type</strong>: SIGHUP</p>
<div class="notice" id="EN-US_TOPIC_0000001188163626__nefbf0ac32661426faf0a547e43c6543c"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="EN-US_TOPIC_0000001188163626__p2063718252432">When you change the password, the system checks the values of <a href="#EN-US_TOPIC_0000001188163626__sbbafd6b400d246ad9b10b95fd632643c">password_reuse_time</a> and <a href="#EN-US_TOPIC_0000001188163626__scadaeaf8f1ee4427b11857bcd78cb191">password_reuse_max</a>.</p>
<ul id="EN-US_TOPIC_0000001188163626__ul26372258431"><li id="EN-US_TOPIC_0000001188163626__li11637142517435">If the values of <strong id="EN-US_TOPIC_0000001188163626__b20628358104717">password_reuse_time</strong> and <strong id="EN-US_TOPIC_0000001188163626__b76287582471">password_reuse_max</strong> are both positive numbers, the password can be reused if either of the following conditions is met:</li><li id="EN-US_TOPIC_0000001188163626__li12637425114311">If the value of <strong id="EN-US_TOPIC_0000001188163626__b1334110719487">password_reuse_time</strong> is <strong id="EN-US_TOPIC_0000001188163626__b196131645452">0</strong>, the days of password reuse are not limited and only the times of password reuse are limited.</li><li id="EN-US_TOPIC_0000001188163626__li7637102517438">If the value of <strong id="EN-US_TOPIC_0000001188163626__b397551511487">password_reuse_max</strong> is <strong id="EN-US_TOPIC_0000001188163626__b1793813473513">0</strong>, the times of password reuse are not limited and only the days of password reuse are limited.</li><li id="EN-US_TOPIC_0000001188163626__li106371525174316">If the values of <strong id="EN-US_TOPIC_0000001188163626__b15585828124813">password_reuse_time</strong> and <strong id="EN-US_TOPIC_0000001188163626__b19585192854810">password_reuse_max</strong> are both <strong id="EN-US_TOPIC_0000001188163626__b2478105011510">0</strong>, password reuse is not limited.</li></ul>
</div></div>
<p id="EN-US_TOPIC_0000001188163626__a0485b70193344cdeb7b278f802386372"><strong id="EN-US_TOPIC_0000001188163626__b18570152151">Value range</strong>: an integer ranging from 0 to 1000</p>
<ul id="EN-US_TOPIC_0000001188163626__uca565f077acf44c6ad5949061c29608d"><li id="EN-US_TOPIC_0000001188163626__lb6982604599147448f583529ea56f186"><strong id="EN-US_TOPIC_0000001188163626__b185999215334549">0</strong> indicates that the password reuse times are not checked.</li><li id="EN-US_TOPIC_0000001188163626__l393880ef56be4c38bfb0437389c94545">A positive number indicates that the new password cannot be the one whose reuse times exceed the specified number.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__a04a77fb79a884473b402c9f0ef9e612a"><strong id="EN-US_TOPIC_0000001188163626__b13915259151516">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b842352706165429">0</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s943fe3c453f648fb958919ab0aa2b08b"><a name="EN-US_TOPIC_0000001188163626__s943fe3c453f648fb958919ab0aa2b08b"></a><a name="s943fe3c453f648fb958919ab0aa2b08b"></a><h4 class="sectiontitle">password_lock_time</h4><p id="EN-US_TOPIC_0000001188163626__aebbbd79dfc624d58a963eccd0013796c"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_en-us_topic_0058967753_b40832548">Parameter description</strong>: Specifies the duration before an account is automatically unlocked.</p>
<p id="EN-US_TOPIC_0000001188163626__p9677154418222"><strong id="EN-US_TOPIC_0000001188163626__b49511423134520">Type</strong>: SIGHUP</p>
<div class="notice" id="EN-US_TOPIC_0000001188163626__nede83145091d408893269caea44c746c"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="EN-US_TOPIC_0000001188163626__u4c212b5c9b0649438fb48786a5a38e07"><li id="EN-US_TOPIC_0000001188163626__li167157351818">The locking and unlocking functions take effect only when the values of <strong id="EN-US_TOPIC_0000001188163626__b168261225811455">password_lock_time</strong> and <a href="#EN-US_TOPIC_0000001188163626__s98a9fdb6b85f4f6ab813a269524dc136">failed_login_attempts</a> are positive numbers.</li><li id="EN-US_TOPIC_0000001188163626__ldfb99fa40dae4ed7a8d9e87507b2c2f6">The integral part of the value of the <strong id="EN-US_TOPIC_0000001188163626__b153508654411455">password_lock_time</strong> parameter indicates the number of days and its decimal part can be converted into hours, minutes, and seconds.</li></ul>
</div></div>
<p id="EN-US_TOPIC_0000001188163626__ac6d6390ccf484acebea31f3e850b3acb"><strong id="EN-US_TOPIC_0000001188163626__b13596170167">Value range</strong>: a floating number ranging from 0 to 365. The unit is day.</p>
<ul id="EN-US_TOPIC_0000001188163626__u5a7cfddea7c94de5ac8eed2eb726cc6d"><li id="EN-US_TOPIC_0000001188163626__led7d9d51541e4d41ad4f757986bed67b"><strong id="EN-US_TOPIC_0000001188163626__b128346474034549">0</strong> indicates that the automatic locking function does not take effect if the password verification fails.</li><li id="EN-US_TOPIC_0000001188163626__le058156bf4c54c51bcc9796540ce63f2">A positive number indicates the duration after which an account is automatically unlocked.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__a23b71f9839644b0db42bd61295ef3c21"><strong id="EN-US_TOPIC_0000001188163626__b776518210">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b357790496">1</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s98a9fdb6b85f4f6ab813a269524dc136"><a name="EN-US_TOPIC_0000001188163626__s98a9fdb6b85f4f6ab813a269524dc136"></a><a name="s98a9fdb6b85f4f6ab813a269524dc136"></a><h4 class="sectiontitle">failed_login_attempts</h4><p id="EN-US_TOPIC_0000001188163626__a728065526a914656aaf8a378553443e9"><strong id="EN-US_TOPIC_0000001188163626__b74807121034549">Parameter description</strong>: Specifies the maximum number of incorrect password attempts before an account is locked. The account will be automatically unlocked after the time specified in <strong id="EN-US_TOPIC_0000001188163626__b23110410534549">password_lock_time</strong>. For example, incorrect password attempts during login and password input failures when using the <strong id="EN-US_TOPIC_0000001188163626__b23623973144319">ALTER USER</strong> command</p>
<p id="EN-US_TOPIC_0000001188163626__p18461121072113"><strong id="EN-US_TOPIC_0000001188163626__b111832414517">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__a0224277f9a664877b46f18d4c758d355"><strong id="EN-US_TOPIC_0000001188163626__b1258375934517">Value range</strong>: an integer ranging from 0 to 1000</p>
<ul id="EN-US_TOPIC_0000001188163626__u2bb51f329fe045138ae839bee1b2a455"><li id="EN-US_TOPIC_0000001188163626__lb312d482a3854183bf40917bf659c12a"><strong id="EN-US_TOPIC_0000001188163626__b116577120934549">0</strong> indicates that the automatic locking function does not take effect.</li><li id="EN-US_TOPIC_0000001188163626__l65f61253bf434234ae28fc8ccbc0df02">A positive number indicates that an account is locked when the number of incorrect password attempts reaches the value of <strong id="EN-US_TOPIC_0000001188163626__b15968773634549">failed_login_attempts</strong>.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__ab392fcc48a044305bd2ec11df4aeba77"><strong id="EN-US_TOPIC_0000001188163626__b16400126619">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b24011028618">10</strong></p>
<div class="notice" id="EN-US_TOPIC_0000001188163626__n28c694ec85094dcc9f7b9ac281b5df70"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="EN-US_TOPIC_0000001188163626__ul17447217111619"><li id="EN-US_TOPIC_0000001188163626__li134473174161">The locking and unlocking functions take effect only when the values of <strong id="EN-US_TOPIC_0000001188163626__b1816516161246">failed_login_attempts</strong> and <a href="#EN-US_TOPIC_0000001188163626__s943fe3c453f648fb958919ab0aa2b08b">password_lock_time</a> are positive numbers.</li><li id="EN-US_TOPIC_0000001188163626__li10201141914167"><strong id="EN-US_TOPIC_0000001188163626__b3679195513415">failed_login_attempts</strong> works with the SSL connection mode of the client to identify the number of incorrect password attempts. If PGSSLMODE is set to <strong id="EN-US_TOPIC_0000001188163626__b210523516611">allow</strong> or <strong id="EN-US_TOPIC_0000001188163626__b2784382067">prefer</strong>, two connection requests are generated for a password connection request. One request attempts an SSL connection, and the other request attempts a non-SSL connection. In this case, the number of incorrect password attempts perceived by the user is the value of <strong id="EN-US_TOPIC_0000001188163626__b410464714816">failed_login_attempts</strong> divided by 2.</li></ul>
</div></div>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s8704e0b9404741b89a785baf9a334d2a"><h4 class="sectiontitle">password_encryption_type</h4><p id="EN-US_TOPIC_0000001188163626__a2a290c8c9a414c028e5b7e7242957dc0"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_aaf01a20fd744461998a11deb15a38896">Parameter description</strong>: Specifies the encryption type of user passwords.</p>
<p id="EN-US_TOPIC_0000001188163626__p537510552203"><strong id="EN-US_TOPIC_0000001188163626__b6295112412457">Type</strong>: SIGHUP</p>
<div class="p" id="EN-US_TOPIC_0000001188163626__a90e94ed6ff46414eac7084eda199200e"><strong id="EN-US_TOPIC_0000001188163626__b1231542649">Value range</strong>: an integer, <strong id="EN-US_TOPIC_0000001188163626__b1274704444">0</strong>, <strong id="EN-US_TOPIC_0000001188163626__b1466051495">1</strong>, or <strong id="EN-US_TOPIC_0000001188163626__b16214111417422">2</strong>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001188163626__table16705196278" frame="border" border="1" rules="all"><caption><b>Table 1 </b><strong id="EN-US_TOPIC_0000001188163626__b159385412018">Value description</strong>:</caption><thead align="left"><tr id="EN-US_TOPIC_0000001188163626__row1970619202710"><th align="left" class="cellrowborder" valign="top" width="15%" id="mcps1.3.11.4.5.2.4.1.1"><p id="EN-US_TOPIC_0000001188163626__p6706792272">Value</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.11.4.5.2.4.1.2"><p id="EN-US_TOPIC_0000001188163626__p1276247192720">Password Storage Format</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="35%" id="mcps1.3.11.4.5.2.4.1.3"><p id="EN-US_TOPIC_0000001188163626__p770689162713">Driver</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001188163626__row15706998279"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.11.4.5.2.4.1.1 "><p id="EN-US_TOPIC_0000001188163626__p6706159112717">0</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.11.4.5.2.4.1.2 "><p id="EN-US_TOPIC_0000001188163626__p1270649132710">Passwords are encrypted in by MD5 and stored in ciphertext.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.11.4.5.2.4.1.3 "><p id="EN-US_TOPIC_0000001188163626__p9706199162711">GaussDB and open-source drivers are supported.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__row187063917278"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.11.4.5.2.4.1.1 "><p id="EN-US_TOPIC_0000001188163626__p1370639122711">1</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.11.4.5.2.4.1.2 "><p id="EN-US_TOPIC_0000001188163626__p270616902712">Passwords are encrypted by SHA256 and are compatible with the MD5 user authentication of the postgres client.</p>
<p id="EN-US_TOPIC_0000001188163626__p15865174243320">Passwords are encrypted by MD5+SHA256.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.11.4.5.2.4.1.3 "><p id="EN-US_TOPIC_0000001188163626__p14591724183018">GaussDB and open-source drivers are supported.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__row670610952720"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.11.4.5.2.4.1.1 "><p id="EN-US_TOPIC_0000001188163626__p117065912720">2</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.11.4.5.2.4.1.2 "><p id="EN-US_TOPIC_0000001188163626__p17401097285">Passwords are encrypted by SHA256 and stored in ciphertext.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.11.4.5.2.4.1.3 "><p id="EN-US_TOPIC_0000001188163626__p1370619912713">GaussDB drivers are supported.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="notice" id="EN-US_TOPIC_0000001188163626__n021991b65c0c451bbcfcbbf107f26e6f"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="EN-US_TOPIC_0000001188163626__ul34738420181"><li id="EN-US_TOPIC_0000001188163626__li1025216145910">MD5 is not recommended because it is not a secure encryption algorithm.</li><li id="EN-US_TOPIC_0000001188163626__li1833862413412">For a user created when <strong id="EN-US_TOPIC_0000001188163626__b18116153315512">password_encryption_type</strong> is set to <strong id="EN-US_TOPIC_0000001188163626__b227733618515">2</strong>, the password has been saved using the SHA256 algorithm. In this case, changing the parameter value does not change the password storage mode in the database. Therefore, open-source clients using MD5 may still fail to connect to the database.</li><li id="EN-US_TOPIC_0000001188163626__li147921210173819">When <strong id="EN-US_TOPIC_0000001188163626__b186561744368">password_encryption_type</strong> is set to <strong id="EN-US_TOPIC_0000001188163626__b69325467619">1</strong>, no matter the <strong id="EN-US_TOPIC_0000001188163626__b18300195219620">pg_hba</strong> authentication mode is set to <strong id="EN-US_TOPIC_0000001188163626__b1484856869">MD5</strong> or <strong id="EN-US_TOPIC_0000001188163626__b8445010720">SHA256</strong>, both the two encryption modes are checked to ensure function compatibility.</li></ul>
</div></div>
<p id="EN-US_TOPIC_0000001188163626__a959e6d4e2678482199947467e088006c"><strong id="EN-US_TOPIC_0000001188163626__b3158552610564">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b842352706173228">1</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s1ad72a5afb584f75bcdf05d19ee152f0"><h4 class="sectiontitle">password_min_length</h4><p id="EN-US_TOPIC_0000001188163626__a280331dce9f14713bebd9fb0281c156f"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_a1fcc890ea1a74237a652e5545f91ef5f">Parameter description</strong>: Specifies the minimum account password length.</p>
<p id="EN-US_TOPIC_0000001188163626__p19381245112019"><strong id="EN-US_TOPIC_0000001188163626__b15452724204517">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__p10232345153413"><strong id="EN-US_TOPIC_0000001188163626__b17725142820223">Value range</strong>: an integer. A password can contain 6 to 999 characters.</p>
<p id="EN-US_TOPIC_0000001188163626__aba52b80e818a4061b4c88f050e7c375b"><strong id="EN-US_TOPIC_0000001188163626__b1413578664144214">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b578690575144214">8</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__sc2fd1e87a08e46d4b37dd700a87a1590"><h4 class="sectiontitle">password_max_length</h4><p id="EN-US_TOPIC_0000001188163626__ab44aea1854e9495faca57e57cb9099ab"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_ad86000e86ba44b6caa0c3e5e1d850bc9">Parameter description</strong>: Specifies the maximum account password length.</p>
<p id="EN-US_TOPIC_0000001188163626__p128800359207"><strong id="EN-US_TOPIC_0000001188163626__b1063120242454">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__p084941483417"><strong id="EN-US_TOPIC_0000001188163626__b17746174413233">Value range</strong>: an integer. A password can contain 6 to 999 characters.</p>
<p id="EN-US_TOPIC_0000001188163626__a32516f1314934fd9bea16d9f506e3271"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778487_ac1c9fb1d06e240c599caf85c9a8ed519">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778487_en-us_topic_0058967649_b842352706195020">32</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__saeb9604931e149849cfea48326df75e4"><h4 class="sectiontitle">password_min_uppercase</h4><p id="EN-US_TOPIC_0000001188163626__a94e7257f5aa2436b9c093e36ebb2d3c3"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_en-us_topic_0058967753_b586567172054">Parameter description</strong>: Specifies the minimum number of uppercase letters that an account password must contain.</p>
<p id="EN-US_TOPIC_0000001188163626__p112481327112020"><strong id="EN-US_TOPIC_0000001188163626__b87841424154513">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__ac8e8cdb3d40e4cfc83f33ee23ebd7546"><strong id="EN-US_TOPIC_0000001188163626__b1621535982316">Value range</strong>: an integer ranging from 0 to 999.</p>
<ul id="EN-US_TOPIC_0000001188163626__u29390a83cd49414094fad7c2220baedf"><li id="EN-US_TOPIC_0000001188163626__l8f404cf47536484cbd61040492d22b45"><strong id="EN-US_TOPIC_0000001188163626__b842352706212534">0</strong> means no limit.</li><li id="EN-US_TOPIC_0000001188163626__li113111038462">A positive integer indicates the minimum number of uppercase letters in the password specified for creating an account.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__a5d775a49aa094ae1a2f9fca99ff8bc53"><strong id="EN-US_TOPIC_0000001188163626__b842352706212615">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b20490125619251">0</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__sd016bfb5242743bcbba8245d16118228"><h4 class="sectiontitle">password_min_lowercase</h4><p id="EN-US_TOPIC_0000001188163626__a3caac1e29a0540b5b45a0f0abd98ca87"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_ae1bfc0751d754deea0a2acfe3268333f">Parameter description</strong>: Specifies the minimum number of lowercase letters that an account password must contain.</p>
<p id="EN-US_TOPIC_0000001188163626__p11122151919205"><strong id="EN-US_TOPIC_0000001188163626__b895842413450">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__a31e8387060a147d58ba8ca2850cee87d"><strong id="EN-US_TOPIC_0000001188163626__b1632660183">Value range</strong>: an integer ranging from 0 to 999.</p>
<ul id="EN-US_TOPIC_0000001188163626__ua02658c2386448c0b73d48bef24d0712"><li id="EN-US_TOPIC_0000001188163626__l448421f6ee2b463ca49d120f40d9a503"><strong id="EN-US_TOPIC_0000001188163626__b1483221790">0</strong> means no limit.</li><li id="EN-US_TOPIC_0000001188163626__ld379180671314988b222cc33482dd2a4">A positive integer indicates the minimum number of lowercase letters in the password specified for creating an account.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__a5136da75fb384cedb78e8037a6185896"><strong id="EN-US_TOPIC_0000001188163626__b1472995462">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b830886309">0</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s6f018b106158445891f20cd2ff03d05e"><h4 class="sectiontitle">password_min_digital</h4><p id="EN-US_TOPIC_0000001188163626__afd038c00d694445e98abf282a3d3bf2c"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_a03703e193a43423ca416f701d2eab723">Parameter description</strong>: Specifies the minimum number of digits that an account password must contain.</p>
<p id="EN-US_TOPIC_0000001188163626__p36461111192017"><strong id="EN-US_TOPIC_0000001188163626__b171361025174518">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__a13f80aece3b14e10a5e6d369d8bf9522"><strong id="EN-US_TOPIC_0000001188163626__b782844428">Value range</strong>: an integer ranging from 0 to 999.</p>
<ul id="EN-US_TOPIC_0000001188163626__u5f5f6b285e234b49b04e993d4b1efeef"><li id="EN-US_TOPIC_0000001188163626__l31a2474a619d4c218c3bb199050a9dda"><strong id="EN-US_TOPIC_0000001188163626__b616176548">0</strong> means no limit.</li><li id="EN-US_TOPIC_0000001188163626__l9b07fe4b86354dc8b2e61bf0c9ef6118">A positive integer indicates the minimum number of digits in the password specified for creating an account.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__a25fe8cf7de854096a0945a5e94685c36"><strong id="EN-US_TOPIC_0000001188163626__b1734162495">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b1719126369">0</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s592982c9d4be4e7089e9895b0282a928"><h4 class="sectiontitle">password_min_special</h4><p id="EN-US_TOPIC_0000001188163626__add3613fae3ce42569375d18b46ebd9f4"><strong id="EN-US_TOPIC_0000001188163626__b1412013101869">Parameter description</strong>: Specifies the minimum number of special characters that an account password must contain.</p>
<p id="EN-US_TOPIC_0000001188163626__p58056316209"><strong id="EN-US_TOPIC_0000001188163626__b43042257456">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__a0b6544ffccd140e7b63cfeeca471d346"><strong id="EN-US_TOPIC_0000001188163626__b1888151344">Value range</strong>: an integer ranging from 0 to 999.</p>
<ul id="EN-US_TOPIC_0000001188163626__u0dcd92b62ff5498794ac7b71b2f25d8c"><li id="EN-US_TOPIC_0000001188163626__l7ee939ed477641a99e3b76e1af87611c"><strong id="EN-US_TOPIC_0000001188163626__b1873570981">0</strong> means no limit.</li><li id="EN-US_TOPIC_0000001188163626__li857662895214">A positive integer indicates the minimum number of special characters in the password specified for creating an account.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__a4c668cd1c1b84450911a9a26c2920f95"><strong id="EN-US_TOPIC_0000001188163626__b374568013">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b1576436953">0</strong></p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001188163626__t4898d0ad2fc048f18baef73bbeacb95b" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Special characters</caption><thead align="left"><tr id="EN-US_TOPIC_0000001188163626__re6f8aae422fb4767b70e9ca4abc4680f"><th align="left" class="cellrowborder" valign="top" width="10.068993100689932%" id="mcps1.3.17.7.2.9.1.1"><p id="EN-US_TOPIC_0000001188163626__a22fce215a5f447f78637f0402f492b84">ID</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10.898910108989101%" id="mcps1.3.17.7.2.9.1.2"><p id="EN-US_TOPIC_0000001188163626__a80accb4ed15c4627b90d56f5092ab08a"><strong id="EN-US_TOPIC_0000001188163626__b60296884311455">Character</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="12.90870912908709%" id="mcps1.3.17.7.2.9.1.3"><p id="EN-US_TOPIC_0000001188163626__a13c4100c70654ba2b316a9473df9a3ac">ID</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="12.088791120887912%" id="mcps1.3.17.7.2.9.1.4"><p id="EN-US_TOPIC_0000001188163626__a8df92dba388c4fc6aed2b8fb66e5df20"><strong id="EN-US_TOPIC_0000001188163626__b89366438211455">Character</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="13.828617138286173%" id="mcps1.3.17.7.2.9.1.5"><p id="EN-US_TOPIC_0000001188163626__a188cb468368e40269ab7e48593c98671">ID</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="11.998800119988001%" id="mcps1.3.17.7.2.9.1.6"><p id="EN-US_TOPIC_0000001188163626__a28e6e0e14f7349d59b5483a180c426f5"><strong id="EN-US_TOPIC_0000001188163626__b130152007211455">Character</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="15.108489151084893%" id="mcps1.3.17.7.2.9.1.7"><p id="EN-US_TOPIC_0000001188163626__af2daaf19667f4fbfbe4ebf1de2c52e17">ID</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="13.0986901309869%" id="mcps1.3.17.7.2.9.1.8"><p id="EN-US_TOPIC_0000001188163626__acf159d5811c74de9994500a2f23f4a65"><strong id="EN-US_TOPIC_0000001188163626__b175751622211455">Character</strong></p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001188163626__r3513940bd57a466882abc4ed8cc05b9f"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.17.7.2.9.1.1 "><p id="EN-US_TOPIC_0000001188163626__a0660ef4ebf154c77ae034272341eb47c">1</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.17.7.2.9.1.2 "><p id="EN-US_TOPIC_0000001188163626__a7ccb32e54f8c4e3bac0e5c5490b28688">~</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.17.7.2.9.1.3 "><p id="EN-US_TOPIC_0000001188163626__a1078fa3cdd21495f80eb0e7f24e1429b">9</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.17.7.2.9.1.4 "><p id="EN-US_TOPIC_0000001188163626__afdac8201353c4eecb396e6246de223a4">*</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.17.7.2.9.1.5 "><p id="EN-US_TOPIC_0000001188163626__a57e5294bcbc74102807a35984be8c596">17</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.17.7.2.9.1.6 "><p id="EN-US_TOPIC_0000001188163626__a5c9b3c2bb401473bab8c8108ea5ffb1b">|</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.17.7.2.9.1.7 "><p id="EN-US_TOPIC_0000001188163626__acac04f6977de4a678639ffb06b1d093d">25</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.17.7.2.9.1.8 "><p id="EN-US_TOPIC_0000001188163626__a20c1fdc1b5c143b29e76e7f96db7b43c">&lt;</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__r24ab77b528ef46e2b78c5271fc68a6d5"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.17.7.2.9.1.1 "><p id="EN-US_TOPIC_0000001188163626__ab895621791334d24ada4848103e7bd26">2</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.17.7.2.9.1.2 "><p id="EN-US_TOPIC_0000001188163626__a36f61f6e579d4ada9f31d24fd89e7c3e">!</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.17.7.2.9.1.3 "><p id="EN-US_TOPIC_0000001188163626__a77866492e86646138ce4913de62dc85d">10</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.17.7.2.9.1.4 "><p id="EN-US_TOPIC_0000001188163626__aec0497a2a09b47f88e97cebec2ef7afd">(</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.17.7.2.9.1.5 "><p id="EN-US_TOPIC_0000001188163626__a2b946aa9f9ba4ba0b1b402f356882674">18</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.17.7.2.9.1.6 "><p id="EN-US_TOPIC_0000001188163626__aefcd63e306f14a49be1e17a1e667a9d6">[</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.17.7.2.9.1.7 "><p id="EN-US_TOPIC_0000001188163626__a8bc1093469474b439857092f350cf06a">26</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.17.7.2.9.1.8 "><p id="EN-US_TOPIC_0000001188163626__ad74af390cf534c18a9eaaa0dd93a4857">.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__rb9ec50c68821429ba5800f35f721d3e3"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.17.7.2.9.1.1 "><p id="EN-US_TOPIC_0000001188163626__a42ef8bdb73a14766b4030cf2485b8028">3</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.17.7.2.9.1.2 "><p id="EN-US_TOPIC_0000001188163626__a6c9d9688b58747019acb58eefac1cdb7">@</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.17.7.2.9.1.3 "><p id="EN-US_TOPIC_0000001188163626__a8f1c604e1d314c4cac0784942d6f2e2e">11</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.17.7.2.9.1.4 "><p id="EN-US_TOPIC_0000001188163626__a01d8a4454ed049168b622122f025ee35">)</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.17.7.2.9.1.5 "><p id="EN-US_TOPIC_0000001188163626__ab458c500fe314349a9650035a34efc95">19</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.17.7.2.9.1.6 "><p id="EN-US_TOPIC_0000001188163626__a0650609352bd4774b25cb8a9c80d5eb9">{</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.17.7.2.9.1.7 "><p id="EN-US_TOPIC_0000001188163626__abc729ff4b0ec4d638bbb58e5f6cfd40b">27</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.17.7.2.9.1.8 "><p id="EN-US_TOPIC_0000001188163626__aa2e1401d8d23440fb748f6f1e27998ee">&gt;</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__r115a34eca49444f5bb8a445a8c11f494"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.17.7.2.9.1.1 "><p id="EN-US_TOPIC_0000001188163626__ab3fa56dabfc0496daec7a9822a766fb7">4</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.17.7.2.9.1.2 "><p id="EN-US_TOPIC_0000001188163626__a20b6326f52b84a1ebe64e23a24b27a03">#</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.17.7.2.9.1.3 "><p id="EN-US_TOPIC_0000001188163626__ad97eb15a657d4e34ba69cb47ecedb87e">12</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.17.7.2.9.1.4 "><p id="EN-US_TOPIC_0000001188163626__a8860f62566c04f5a99bc5217d8c0070e">-</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.17.7.2.9.1.5 "><p id="EN-US_TOPIC_0000001188163626__a84987f893d2c462fa946824df4c8cee8">20</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.17.7.2.9.1.6 "><p id="EN-US_TOPIC_0000001188163626__aef3bab21677c4a2f8c53238f8e2a1cba">}</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.17.7.2.9.1.7 "><p id="EN-US_TOPIC_0000001188163626__a23aa1f43b5de4ba7a1c65ce5e39edd17">28</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.17.7.2.9.1.8 "><p id="EN-US_TOPIC_0000001188163626__a1bb289bd446040cbaf370927829b876f">/</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__re06f0bf1ab764a6a8dc61483bd8b730c"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.17.7.2.9.1.1 "><p id="EN-US_TOPIC_0000001188163626__abdb9b49a97814616ada2ec42e9fc15cb">5</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.17.7.2.9.1.2 "><p id="EN-US_TOPIC_0000001188163626__a5c25357a8b5244639e53b40099de4dea">$</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.17.7.2.9.1.3 "><p id="EN-US_TOPIC_0000001188163626__aa329c4502b8348aea3b6a2ea2c464922">13</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.17.7.2.9.1.4 "><p id="EN-US_TOPIC_0000001188163626__a1f6bcddc4a864caf84f38403dc2b5d9f">_</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.17.7.2.9.1.5 "><p id="EN-US_TOPIC_0000001188163626__a2200883a403648f586afabe8f579c1b0">21</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.17.7.2.9.1.6 "><p id="EN-US_TOPIC_0000001188163626__ab52147ecdd5b4a5da0c697f67b833158">]</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.17.7.2.9.1.7 "><p id="EN-US_TOPIC_0000001188163626__a68b2d5addae845448ab67c8c3227f551">29</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.17.7.2.9.1.8 "><p id="EN-US_TOPIC_0000001188163626__ab1c4819a47474007ba040849b5efe815">?</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__rc96a86406102457ba4fd7b50ba1d5515"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.17.7.2.9.1.1 "><p id="EN-US_TOPIC_0000001188163626__ac0bf85b1615a4985b59352567f300f00">6</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.17.7.2.9.1.2 "><p id="EN-US_TOPIC_0000001188163626__a83b7fccf47f7433c802f052af98d76ce">%</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.17.7.2.9.1.3 "><p id="EN-US_TOPIC_0000001188163626__a96d428ce99cb4407b14089f8b93fe561">14</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.17.7.2.9.1.4 "><p id="EN-US_TOPIC_0000001188163626__af6bb337cf03a4cf3a43d25729410080b">=</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.17.7.2.9.1.5 "><p id="EN-US_TOPIC_0000001188163626__af806fdd50c594ef99a6c617c0692b668">22</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.17.7.2.9.1.6 "><p id="EN-US_TOPIC_0000001188163626__a9b4610771ea84874b9ffc96c21020e47">;</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.17.7.2.9.1.7 "><p id="EN-US_TOPIC_0000001188163626__add15f8717bbb4e6ca639de6993b04620">-</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.17.7.2.9.1.8 "><p id="EN-US_TOPIC_0000001188163626__aabcb84ab30d043a0bf1d6cd478e6193d">-</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__r880af2411708430eacbb776af98bf7d9"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.17.7.2.9.1.1 "><p id="EN-US_TOPIC_0000001188163626__af67bf4bdee5545b38040dd25f71695d4">7</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.17.7.2.9.1.2 "><p id="EN-US_TOPIC_0000001188163626__a1755ddd8f15d4405aa1d905eea673416">^</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.17.7.2.9.1.3 "><p id="EN-US_TOPIC_0000001188163626__ada1ac1d7108a4b3bba346f8b655de79e">15</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.17.7.2.9.1.4 "><p id="EN-US_TOPIC_0000001188163626__a5f3f3a5ff58a49268fd9354796e0b6c9">+</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.17.7.2.9.1.5 "><p id="EN-US_TOPIC_0000001188163626__afef4a86c2a6f4742be3b7115181704bf">23</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.17.7.2.9.1.6 "><p id="EN-US_TOPIC_0000001188163626__ad3898725686345cfb2759fb0a0f72269">:</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.17.7.2.9.1.7 "><p id="EN-US_TOPIC_0000001188163626__a5ce8d21b7bd04e2ea032b2d42ba3c9f0">-</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.17.7.2.9.1.8 "><p id="EN-US_TOPIC_0000001188163626__afbc61c982d474f068c998ffee7e3c2a2">-</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001188163626__r7ba2ccd041d243f5a783a516f24c52b6"><td class="cellrowborder" valign="top" width="10.068993100689932%" headers="mcps1.3.17.7.2.9.1.1 "><p id="EN-US_TOPIC_0000001188163626__a52e3b29cd208442db6261d0d948c912c">8</p>
</td>
<td class="cellrowborder" valign="top" width="10.898910108989101%" headers="mcps1.3.17.7.2.9.1.2 "><p id="EN-US_TOPIC_0000001188163626__a721c0b38a3a54b48bc4aeb226e29c127">&amp;</p>
</td>
<td class="cellrowborder" valign="top" width="12.90870912908709%" headers="mcps1.3.17.7.2.9.1.3 "><p id="EN-US_TOPIC_0000001188163626__a496f78fde83b4283ab8f1e08fd04a245">16</p>
</td>
<td class="cellrowborder" valign="top" width="12.088791120887912%" headers="mcps1.3.17.7.2.9.1.4 "><p id="EN-US_TOPIC_0000001188163626__a704a26bace504f8a8a6bc89939098ace">\</p>
</td>
<td class="cellrowborder" valign="top" width="13.828617138286173%" headers="mcps1.3.17.7.2.9.1.5 "><p id="EN-US_TOPIC_0000001188163626__a0439a4727831430a960b97e981be9bcc">24</p>
</td>
<td class="cellrowborder" valign="top" width="11.998800119988001%" headers="mcps1.3.17.7.2.9.1.6 "><p id="EN-US_TOPIC_0000001188163626__a3443a7fcc1964d4e8fb4b0a9b5b1c172">,</p>
</td>
<td class="cellrowborder" valign="top" width="15.108489151084893%" headers="mcps1.3.17.7.2.9.1.7 "><p id="EN-US_TOPIC_0000001188163626__a43c9ff45ae96416f9b371dfd0e5bbd77">-</p>
</td>
<td class="cellrowborder" valign="top" width="13.0986901309869%" headers="mcps1.3.17.7.2.9.1.8 "><p id="EN-US_TOPIC_0000001188163626__ae0c110e70a2e4f0481ab26409d433ce6">-</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__sf2083c0fff0d4f52a32c89dc24cb0476"><h4 class="sectiontitle">password_effect_time</h4><p id="EN-US_TOPIC_0000001188163626__aa298734079d54c9cb62e2928c623d051"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_a8b870fe38dfa4ae1ab0fcf85aa425d3f">Parameter description</strong>: Specifies the validity period of an account password.</p>
<p id="EN-US_TOPIC_0000001188163626__p9978554151913"><strong id="EN-US_TOPIC_0000001188163626__b2473102554517">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__a543a1a821a034992a698f47fdd6c69ca"><strong id="EN-US_TOPIC_0000001188163626__b4959152315476">Value range</strong>: a floating number ranging from 0 to 999. The unit is day.</p>
<ul id="EN-US_TOPIC_0000001188163626__udf25f051463543b1ab5d36d8d0185a41"><li id="EN-US_TOPIC_0000001188163626__l3540aab4c9234f13a20079a3edd37d3b"><strong id="EN-US_TOPIC_0000001188163626__b84235270621354">0</strong> indicates the function of validity period restriction is disabled.</li><li id="EN-US_TOPIC_0000001188163626__li2969182411532">A floating point number from 1 to 999 indicates the validity period of the password specified for creating an account. When the password is about to expire or has expired, the system prompts the user to change the password.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__accd9cd0f325c4f02a8e92619836d989e"><strong id="EN-US_TOPIC_0000001188163626__b1896293517535">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b842352706171710">90</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188163626__s3e8269f98d6142ec91ef07b9b5bf6168"><h4 class="sectiontitle">password_notify_time</h4><p id="EN-US_TOPIC_0000001188163626__a2a948409ed244e09a17bc6a31748010b"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0059778664_a640280595dc84d1498b59351e4a520f2">Parameter description</strong>: Specifies how many days in advance users are notified before the account password expires.</p>
<p id="EN-US_TOPIC_0000001188163626__p134171640181714"><strong id="EN-US_TOPIC_0000001188163626__b16640202519458">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001188163626__a20481a932b404bd5a403ba802046efa8"><strong id="EN-US_TOPIC_0000001188163626__b1842173254713">Value range</strong>: an integer ranging from 0 to 999. The unit is day.</p>
<ul id="EN-US_TOPIC_0000001188163626__u2ea69d68c3cf40bfa8f13747710c6ecd"><li id="EN-US_TOPIC_0000001188163626__l634b3abfe3274a4ba0f7115869935645"><strong id="EN-US_TOPIC_0000001188163626__b842352706213633">0</strong> indicates the reminder is disabled.</li><li id="EN-US_TOPIC_0000001188163626__li1937775035716">A positive integer indicates how long before expiry the reminder will appear.</li></ul>
<p id="EN-US_TOPIC_0000001188163626__p1215920525812"><strong id="EN-US_TOPIC_0000001188163626__en-us_topic_0058967657_b26917141">Default value</strong>: <strong id="EN-US_TOPIC_0000001188163626__b842352706204923">7</strong></p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="dws_04_0888.html">Connection and Authentication</a></div>
</div>
</div>
View Git Blame Copy Permalink