CREATE PROFILE

Creates a profile that controls password requirements for users.

Syntax

CREATE PROFILE profile‑name LIMIT [ 
    PASSWORD_LIFE_TIME setting
    PASSWORD_MIN_LIFE_TIME setting
    PASSWORD_GRACE_TIME setting
    FAILED_LOGIN_ATTEMPTS setting
    PASSWORD_LOCK_TIME setting
    PASSWORD_REUSE_MAX setting
    PASSWORD_REUSE_TIME setting
    PASSWORD_MAX_LENGTH setting
    PASSWORD_MIN_LENGTH setting
    PASSWORD_MIN_LETTERS setting
    PASSWORD_MIN_UPPERCASE_LETTERS setting
    PASSWORD_MIN_LOWERCASE_LETTERS setting
    PASSWORD_MIN_DIGITS setting
    PASSWORD_MIN_SYMBOLS setting
    PASSWORD_MIN_CHAR_CHANGE setting ]

Parameters

All parameters that are not explicitly set in a new profile are set to default, and inherit their settings from the default profile.

Name Description
profile‑name

The name of the profile to create, where name conforms to conventions described in Identifiers.

PASSWORD_LIFE_TIME

Set to an integer value, one of the following:

  • ≥ 1: The number of days a password remains valid.
  • UNLIMITED: Password remains valid indefinitely.

After your password's lifetime and grace period expire, you must change your password on your next login, if you have not done so already.
PASSWORD_MIN_LIFE_TIME

Set to an integer value, one of the following:

  • Default: 0
  • ≥ 1: The number of days a password must be set before it can be changed
  • UNLIMITED: Password can be reset at any time.
PASSWORD_GRACE_TIME

Set to an integer value, one of the following:

  • ≥ 1: The number of days a password can be used after it expires.
  • UNLIMITED: No grace period.
FAILED_LOGIN_ATTEMPTS

Set to an integer value, one of the following:

  • ≥ 1: The number of consecutive failed login attempts Vertica allows before locking your account.
  • UNLIMITED: Vertica allows an unlimited number of failed login attempts.
PASSWORD_LOCK_TIME

Set to an integer value, one of the following:

  • ≥ 1: The number of days your account is locked after too many failed login attempts. The account is automatically unlocked when the lock time elapses.
  • UNLIMITED: Account remains indefinitely inaccessible until a superuser manually unlocks it.
PASSWORD_REUSE_MAX

Set to an integer value, one of the following:

  • ≥ 1: The number of times you must change your password before you can reuse an earlier password.
  • UNLIMITED: You can reuse an earlier password without any intervening changes.
PASSWORD_REUSE_TIME

Set to an integer value, one of the following:

  • ≥ 1: The number of days that must pass after a password is set before you can reuse it.
  • UNLIMITED: You can reuse an earlier password immediately.
PASSWORD_MAX_LENGTH

The maximum number of characters allowed in a password, one of the following:

  • Integer between 8 and 512, inclusive
  • UNLIMITED: Maximum of 512 characters
PASSWORD_MIN_LENGTH

The minimum number of characters required in a password, one of the following:

  • 0 to PASSWORD_MAX_LENGTH
  • UNLIMITED: Minimum of PASSWORD_MAX_LENGTH
PASSWORD_MIN_LETTERS

Minimum number of letters (a‑z and A‑Z) that must be in a password, one of the following:

  • Integer between 0 and PASSWORD_MAX_LENGTH, inclusive
  • UNLIMITED: 0 (no minimum)
PASSWORD_MIN_UPPERCASE_LETTERS

Minimum number of uppercase letters (A‑Z) that must be in a password, one of the following:

  • Integer between 0 and PASSWORD_MAX_LENGTH, inclusive
  • UNLIMITED: 0 (no minimum)
PASSWORD_MIN_LOWERCASE_LETTERS

Minimum number of lowercase letters (a-z) that must be in a password, one of the following:

  • Integer between 0 and PASSWORD_MAX_LENGTH, inclusive
  • UNLIMITED: 0 (no minimum)
PASSWORD_MIN_DIGITS

Minimum number of digits (0-9) that must be in a password, one of the following:

  • Integer between 0 and PASSWORD_MAX_LENGTH, inclusive
  • UNLIMITED: 0 (no minimum)
PASSWORD_MIN_SYMBOLS

Minimum number of symbols—printable non-letter and non-digit characters such as $, #, @—that must be in a password, one of the following:

  • Integer between 0 and PASSWORD_MAX_LENGTH, inclusive
  • UNLIMITED: 0 (no minimum)
PASSWORD_MIN_CHAR_CHANGE

Minimum number of characters that must be different from the previous password:

  • Default: 0
  • Integer between 0 and PASSWORD_MAX_LENGTH, inclusive
  • UNLIMITED: 0 (no minimum)

Privileges

Superuser

Profile Settings and Client Authentication

The following profile settings affect client authentication methods, such as LDAP or GSS:

  • FAILED_LOGIN_ATTEMPTS
  • PASSWORD_LOCK_TIME

All other profile settings are used only by Vertica to manage its passwords.

Example

=> CREATE PROFILE sample_profile LIMIT PASSWORD_MAX_LENGTH 20;

See Also