May 17, 2026, 11:40 PM

inbox/DataBase/PostgreSQL/dba_scripts/logins_block.sh

@@ -0,0 +1,90 @@
+#!/bin/bash
+
+DBNAME="postgres"
+USER="-U postgres"
+PORT="-p 5432"
+
+usage() {
+    echo "Usage: $0 [-d <dbname> -U <user> -p <port> u]"
+    exit 1
+}
+
+while getopts "d:p:uU:" OPT;
+do case "${OPT}" in
+      d) DBNAME=$OPTARG
+	 ;;
+      p) PORT="-p $OPTARG"
+	 ;;
+      U) USER="-U $OPTARG"
+	 ;;
+      u) usage
+	 ;;
+    [?]) usage
+   esac;
+done
+
+
+lockout()
+{
+
+CNT=$(psql $PORT $USER $DBNAME <<_QUERY_
+
+DROP TABLE IF EXISTS pg_lockout;
+CREATE TABLE pg_lockout
+AS SELECT rolname,
+	  rolsuper,
+	  rolcanlogin
+  FROM pg_authid
+ WHERE rolsuper IS FALSE;
+
+ALTER TABLE pg_lockout
+   ADD CONSTRAINT pg_lockout_pkey PRIMARY KEY (rolname);
+
+UPDATE pg_authid au
+   SET rolcanlogin = FALSE
+  FROM pg_lockout lo
+ WHERE lo.rolcanlogin = TRUE
+   AND au.rolname = lo.rolname;
+
+_QUERY_
+
+)
+
+}
+
+current_user()
+{
+
+CUSER=$(psql -t $PORT $USER $DBNAME <<_QUERY_
+
+SELECT TRIM(BOTH FROM current_user);
+
+_QUERY_
+
+)
+
+}
+
+
+###############################################################
+#			  MAIN				      #
+###############################################################
+
+current_user
+
+echo "current user is $CUSER"
+
+if [ $CUSER != "postgres" ]
+  then
+    echo "You must be postgres to execute this script."
+    echo "Aborting."
+    exit 1
+fi
+
+
+lockout
+
+echo "Users locked out = $CNT"
+
+exit 0
+