A system catalog for managing password history. Used for password reuse confirmation and password rollover. When DROP ROLE is executed, the corresponding row is automatically deleted.
Since this catalog contains passwords, it must not be readable by third parties.
This system catalog is updated when the password is updated, and if the password reuse limit is finite, unnecessary history deletion is also performed. Old passwords that have been removed from the catalog are treated as having never been used.
passhistpassword is saved in the format specified by the password_encryption parameter.
Column | Type | Description |
---|---|---|
passhistroleid | oid | Identifier of the user whose password was set |
passhistpassword | text | Encrypted password |
passhistpasswordsetat | timestamp with time zone | Time when the password was updated |