| F.3. auth_delay — pause on authentication failure | ||||
|---|---|---|---|---|
| Prev | Up | Appendix F. Additional Supplied Modules and Extensions Shipped inpostgrespro-std-17-contrib | Home | Next |
F.3. auth_delay — pause on authentication failure#
auth_delay causes the server to pause briefly before reporting authentication failure, to make brute-force attacks on database passwords more difficult. Note that it does nothing to prevent denial-of-service attacks, and may even exacerbate them, since processes that are waiting before reporting authentication failure will still consume connection slots.
In order to function, this module must be loaded viashared_preload_libraries inpostgresql.conf.
F.3.1. Configuration Parameters#
These parameters must be set inpostgresql.conf. Typical usage might be:
# postgresql.confshared_preload_libraries = 'auth_delay'auth_delay.milliseconds = '500'
F.3.2. Author#
KaiGai Kohei<kaigai@ak.jp.nec.com>