doc/src/sgml/html/auth-delay.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>F.3. auth_delay — pause on authentication failure</title><link rel="stylesheet" type="text/css" href="stylesheet.css" /><link rev="made" href="pgsql-docs@lists.postgresql.org" /><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot" /><link rel="prev" href="amcheck.html" title="F.2. amcheck — tools to verify table and index consistency" /><link rel="next" href="auto-explain.html" title="F.4. auto_explain — log execution plans of slow queries" /></head><body id="docContent" class="container-fluid col-10"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="5" align="center">F.3. auth_delay — pause on authentication failure</th></tr><tr><td width="10%" align="left"><a accesskey="p" href="amcheck.html" title="F.2. amcheck — tools to verify table and index consistency">Prev</a> </td><td width="10%" align="left"><a accesskey="u" href="contrib.html" title="Appendix F. Additional Supplied Modules and Extensions">Up</a></td><th width="60%" align="center">Appendix F. Additional Supplied Modules and Extensions</th><td width="10%" align="right"><a accesskey="h" href="index.html" title="PostgreSQL 16.3 Documentation">Home</a></td><td width="10%" align="right"> <a accesskey="n" href="auto-explain.html" title="F.4. auto_explain — log execution plans of slow queries">Next</a></td></tr></table><hr /></div><div class="sect1" id="AUTH-DELAY"><div class="titlepage"><div><div><h2 class="title" style="clear: both">F.3. auth_delay — pause on authentication failure <a href="#AUTH-DELAY" class="id_link">#</a></h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="sect2"><a href="auth-delay.html#AUTH-DELAY-CONFIGURATION-PARAMETERS">F.3.1. Configuration Parameters</a></span></dt><dt><span class="sect2"><a href="auth-delay.html#AUTH-DELAY-AUTHOR">F.3.2. Author</a></span></dt></dl></div><a id="id-1.11.7.13.2" class="indexterm"></a><p>
  <code class="filename">auth_delay</code> causes the server to pause briefly before
  reporting authentication failure, to make brute-force attacks on database
  passwords more difficult.  Note that it does nothing to prevent
  denial-of-service attacks, and may even exacerbate them, since processes
  that are waiting before reporting authentication failure will still consume
  connection slots.
 </p><p>
  In order to function, this module must be loaded via
  <a class="xref" href="runtime-config-client.html#GUC-SHARED-PRELOAD-LIBRARIES">shared_preload_libraries</a> in <code class="filename">postgresql.conf</code>.
 </p><div class="sect2" id="AUTH-DELAY-CONFIGURATION-PARAMETERS"><div class="titlepage"><div><div><h3 class="title">F.3.1. Configuration Parameters <a href="#AUTH-DELAY-CONFIGURATION-PARAMETERS" class="id_link">#</a></h3></div></div></div><div class="variablelist"><dl class="variablelist"><dt><span class="term">
     <code class="varname">auth_delay.milliseconds</code> (<code class="type">integer</code>)
     <a id="id-1.11.7.13.5.2.1.1.3" class="indexterm"></a>
    </span></dt><dd><p>
      The number of milliseconds to wait before reporting an authentication
      failure.  The default is 0.
     </p></dd></dl></div><p>
   These parameters must be set in <code class="filename">postgresql.conf</code>.
   Typical usage might be:
  </p><pre class="programlisting">
# postgresql.conf
shared_preload_libraries = 'auth_delay'

auth_delay.milliseconds = '500'
</pre></div><div class="sect2" id="AUTH-DELAY-AUTHOR"><div class="titlepage"><div><div><h3 class="title">F.3.2. Author <a href="#AUTH-DELAY-AUTHOR" class="id_link">#</a></h3></div></div></div><p>
   KaiGai Kohei <code class="email">&lt;<a class="email" href="mailto:kaigai@ak.jp.nec.com">kaigai@ak.jp.nec.com</a>&gt;</code>
  </p></div></div><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="amcheck.html" title="F.2. amcheck — tools to verify table and index consistency">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="contrib.html" title="Appendix F. Additional Supplied Modules and Extensions">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="auto-explain.html" title="F.4. auto_explain — log execution plans of slow queries">Next</a></td></tr><tr><td width="40%" align="left" valign="top">F.2. amcheck — tools to verify table and index consistency </td><td width="20%" align="center"><a accesskey="h" href="index.html" title="PostgreSQL 16.3 Documentation">Home</a></td><td width="40%" align="right" valign="top"> F.4. auto_explain — log execution plans of slow queries</td></tr></table></div></body></html>