database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-07-28 23:42:10 +03:00
Code Activity

New contrib module, auth_delay.

Browse Source 
KaiGai Kohei, with a few changes by me.
This commit is contained in:
Robert Haas
2010-11-27 07:22:25 -05:00
parent d53c1255d9
commit fe7a32fc87
7 changed files with 159 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

67
doc/src/sgml/auth-delay.sgml Normal file
View File

@ -0,0 +1,67 @@
<!-- doc/src/sgml/auth-delay.sgml -->
<sect1 id="auth-delay">
<title>auth_delay</title>
<indexterm zone="auth-delay">
<primary>auth_delay</primary>
</indexterm>
<para>
<filename>auth_delay</filename> causes the server to pause briefly before
reporting authentication failure, to make brute-force attacks on database
passwords more difficult. Note that it does nothing to prevent
denial-of-service attacks, and may even exacerbate them, since processes
that are waiting before reporting authentication failure will still consume
connection slots.
</para>
<para>
In order to function, this module must be loaded via
<xref linkend="guc-shared-preload-libraries"> in <filename>postgresql.conf</>.
</para>
<sect2>
<title>Configuration parameters</title>
<variablelist>
<varlistentry>
<term>
<varname>auth_delay.milliseconds</varname> (<type>int</type>)
</term>
<indexterm>
<primary><varname>auth_delay.milliseconds</> configuration parameter</primary>
</indexterm>
<listitem>
<para>
The number of milliseconds to wait before reporting an authentication
failure. The default is 0.
</para>
</listitem>
</varlistentry>
</variablelist>
<para>
In order to set these parameters in your <filename>postgresql.conf</> file,
you will need to add <literal>auth_delay</> to
<xref linkend="guc-custom-variable-classes">. Typical usage might be:
</para>
<programlisting>
# postgresql.conf
shared_preload_libraries = 'auth_delay'
custom_variable_classes = 'auth_delay'
auth_delay.milliseconds = '500'
</programlisting>
</sect2>
<sect2>
<title>Author</title>
<para>
KaiGai Kohei <email>kaigai@ak.jp.nec.com</email>
</para>
</sect2>
</sect1>

1
doc/src/sgml/contrib.sgml
View File

@ -81,6 +81,7 @@ psql -d dbname -f <replaceable>SHAREDIR</>/contrib/<replaceable>module</>.sql
</para>
&adminpack;
&auth-delay;
&auto-explain;
&btree-gin;
&btree-gist;

1
doc/src/sgml/filelist.sgml
View File

@ -93,6 +93,7 @@
<!-- contrib information -->
<!entity contrib SYSTEM "contrib.sgml">
<!entity adminpack SYSTEM "adminpack.sgml">
<!entity auth-delay SYSTEM "auth-delay.sgml">
<!entity auto-explain SYSTEM "auto-explain.sgml">
<!entity btree-gin SYSTEM "btree-gin.sgml">
<!entity btree-gist SYSTEM "btree-gist.sgml">