Top
Enterprise Postgres 16 Operation Guide

C.3 pgx_password_history

A system catalog for managing password history. When DROP ROLE is executed, the corresponding row is automatically deleted.

Since this catalog contains passwords, general users cannot refer to it, just like pg_authid. This system catalog is basically updated when the password is updated, and if the password reuse limit is finite, unnecessary history deletion is also performed. Old passwords that have been removed from the catalog are treated as having never been used.

passhistpassword is saved in the format specified by the password_encryption parameter.

Column

Type

Description

passhistroleid

oid

Identifier of the user whose password was set
Set unique constraint with (passhistroleid, passhistpassword).

passhistpassword

text

Encrypted password
Save rolpassword value in pg_authid as history
(NOT NULL constraint)

passhistpasswordsetat

timestamp with time zone

Time when the password was updated
(NOT NULL constraint)