金仓数据库KingbaseES中如何设置口令策略

关键字

KingbaseES，口令策略

开启密码复杂度

1、编辑kingbase.conf文件，在shared_preload_libraries中加入passwordcheck：

shared_preload_libraries = ‘passwordcheck’

然后重启服务。

2、以SYSTEM用户登录数据库，创建扩展

TEST =# create extension passwordcheck;
CREATE EXTENSION

3、执行

TEST =# alter system set passwordcheck.enable = on;
ALTER SYSTEM

TEST =# show passwordcheck.enable;
 passwordcheck.enable
-------------------------
 off
(1行记录)

TEST =# call sys_reload_conf();
 sys_reload_conf()
-------------------------
 t
(1行记录)

TEST =# show passwordcheck.enable;
 passwordcheck.enable
-------------------------
 on
(1行记录)

查看口令默认长度

TEST =# show passwordcheck.password_length;
 passwordcheck.password_length
---------------------------------
 8
(1行记录)

查看口令默认包含几个字母

TEST =# show passwordcheck.password_condition_letter;
 passwordcheck.password_condition_letter
-------------------------------------------
 2
(1行记录)

查看口令默认包含几个数字

TEST =# show passwordcheck.password_condition_digit;
 passwordcheck.password_condition_digit
-------------------------------------------
 2
(1行记录)

示例

1、以SYSTEM 用户登录

2、创建用户

TEST =# create user u1;

3、为用户设置密码

TEST =# alter user u1 with password '12345678ab';

4、system修改用户的密码

（1）密码为6位数字组成

TEST =# alter user u1 with password '123456';
错误：Password length 6 is too short, should be longer than min password length 8.

（2）密码为8位数字组成

TEST =# alter user u1 with password '12345678';
错误：Password should contain at least 2 letter and the current letter is 0.

（3）密码由数字+一位字母组成

TEST =# alter user u1 with password '12345678a';
错误：Password should contain at least 2 letter and the current letter is 1.

（4）密码由数字+二位以上字母组成

TEST =# alter user u1 with password '12345678abc';
ALTER ROLE