Top
Enterprise Postgres 17 Operation Guide

C.4 pgx_password_history

A system catalog for managing password history. Used for password reuse confirmation and password rollover. When DROP ROLE is executed, the corresponding row is automatically deleted.

Since this catalog contains passwords, it must not be readable by third parties.

This system catalog is updated when the password is updated, and if the password reuse limit is finite, unnecessary history deletion is also performed. Old passwords that have been removed from the catalog are treated as having never been used.

passhistpassword is saved in the format specified by the password_encryption parameter.

Column

Type

Description

passhistroleid

oid

Identifier of the user whose password was set
Set unique constraint with (passhistroleid, passhistpassword).

passhistpassword

text

Encrypted password
Save rolpassword value in pg_authid as history
(NOT NULL constraint)

passhistpasswordsetat

timestamp with time zone

Time when the password was updated
(NOT NULL constraint)