hey, do we have password expiry for users?

Currently, StarRocks does not support a native password expiry or password aging policy for users using native authentication. While you can manage users and reset passwords using the

CREATE USER

,

ALTER USER

, and

SET PASSWORD

commands, there are no built-in mechanisms to automatically expire passwords or enforce rotation intervals within StarRocks itself. How to manage password policies: 1. External Authentication (Recommended): If your organization requires strict password policies (such as expiry, complexity, or multi-factor authentication), it is recommended to integrate StarRocks with an external authentication system. StarRocks supports: * LDAP/AD: Authenticate users against your corporate directory where password policies are centrally managed. * OAuth 2.0 / OpenID Connect (OIDC): Use modern identity providers (like Okta or Azure AD). * JWT Authentication. 2. Manual Management: For native users, administrators can manually rotate passwords using:

sql
   ALTER USER 'username' IDENTIFIED BY 'new_password';

3. User Properties: You can set certain properties for users (like

max_user_connections

), but these do not include password lifetime settings. For more details on setting up secure authentication, you can check the Native Authentication or Security Integration documentation. References • administration/user_privs/authentication/native_authentication.md • sql-reference/sql-statements/account-management/ALTER_USER.md • deployment/post_deployment_setup.md