← Back to branch summary

~ubuntu-branches/ubuntu/oneiric/postgresql-9.1/oneiric-security

« back to all changes in this revision

Viewing changes to doc/src/sgml/html/auth-delay.html

  • Committer: Bazaar Package Importer
  • Author(s): Martin Pitt
  • Date: 2011-05-11 10:41:53 UTC
  • Revision ID: james.westby@ubuntu.com-20110511104153-psbh2o58553fv1m0
Tags: upstream-9.1~beta1
Import upstream version 9.1~beta1

Show diffs side-by-side

added added

removed removed

Lines of Context:
doc/src/sgml/html/auth-delay.html
 
1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
 
2
<HTML
 
3
><HEAD
 
4
><TITLE
 
5
>auth_delay</TITLE
 
6
><META
 
7
NAME="GENERATOR"
 
8
CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
 
9
REV="MADE"
 
10
HREF="mailto:pgsql-docs@postgresql.org"><LINK
 
11
REL="HOME"
 
12
TITLE="PostgreSQL 9.1beta1 Documentation"
 
13
HREF="index.html"><LINK
 
14
REL="UP"
 
15
TITLE="Additional Supplied Modules"
 
16
HREF="contrib.html"><LINK
 
17
REL="PREVIOUS"
 
18
TITLE="adminpack"
 
19
HREF="adminpack.html"><LINK
 
20
REL="NEXT"
 
21
TITLE="auto_explain"
 
22
HREF="auto-explain.html"><LINK
 
23
REL="STYLESHEET"
 
24
TYPE="text/css"
 
25
HREF="stylesheet.css"><META
 
26
HTTP-EQUIV="Content-Type"
 
27
CONTENT="text/html; charset=ISO-8859-1"><META
 
28
NAME="creation"
 
29
CONTENT="2011-04-27T21:20:33"></HEAD
 
30
><BODY
 
31
CLASS="SECT1"
 
32
><DIV
 
33
CLASS="NAVHEADER"
 
34
><TABLE
 
35
SUMMARY="Header navigation table"
 
36
WIDTH="100%"
 
37
BORDER="0"
 
38
CELLPADDING="0"
 
39
CELLSPACING="0"
 
40
><TR
 
41
><TH
 
42
COLSPAN="5"
 
43
ALIGN="center"
 
44
VALIGN="bottom"
 
45
><A
 
46
HREF="index.html"
 
47
>PostgreSQL 9.1beta1 Documentation</A
 
48
></TH
 
49
></TR
 
50
><TR
 
51
><TD
 
52
WIDTH="10%"
 
53
ALIGN="left"
 
54
VALIGN="top"
 
55
><A
 
56
TITLE="adminpack"
 
57
HREF="adminpack.html"
 
58
ACCESSKEY="P"
 
59
>Prev</A
 
60
></TD
 
61
><TD
 
62
WIDTH="10%"
 
63
ALIGN="left"
 
64
VALIGN="top"
 
65
><A
 
66
TITLE="Additional Supplied Modules"
 
67
HREF="contrib.html"
 
68
>Fast Backward</A
 
69
></TD
 
70
><TD
 
71
WIDTH="60%"
 
72
ALIGN="center"
 
73
VALIGN="bottom"
 
74
>Appendix F. Additional Supplied Modules</TD
 
75
><TD
 
76
WIDTH="10%"
 
77
ALIGN="right"
 
78
VALIGN="top"
 
79
><A
 
80
TITLE="Additional Supplied Modules"
 
81
HREF="contrib.html"
 
82
>Fast Forward</A
 
83
></TD
 
84
><TD
 
85
WIDTH="10%"
 
86
ALIGN="right"
 
87
VALIGN="top"
 
88
><A
 
89
TITLE="auto_explain"
 
90
HREF="auto-explain.html"
 
91
ACCESSKEY="N"
 
92
>Next</A
 
93
></TD
 
94
></TR
 
95
></TABLE
 
96
><HR
 
97
ALIGN="LEFT"
 
98
WIDTH="100%"></DIV
 
99
><DIV
 
100
CLASS="SECT1"
 
101
><H1
 
102
CLASS="SECT1"
 
103
><A
 
104
NAME="AUTH-DELAY"
 
105
>F.2. auth_delay</A
 
106
></H1
 
107
><P
 
108
>  <TT
 
109
CLASS="FILENAME"
 
110
>auth_delay</TT
 
111
> causes the server to pause briefly before
 
112
  reporting authentication failure, to make brute-force attacks on database
 
113
  passwords more difficult.  Note that it does nothing to prevent
 
114
  denial-of-service attacks, and may even exacerbate them, since processes
 
115
  that are waiting before reporting authentication failure will still consume
 
116
  connection slots.
 
117
 </P
 
118
><P
 
119
>  In order to function, this module must be loaded via 
 
120
  <A
 
121
HREF="runtime-config-resource.html#GUC-SHARED-PRELOAD-LIBRARIES"
 
122
>shared_preload_libraries</A
 
123
> in <TT
 
124
CLASS="FILENAME"
 
125
>postgresql.conf</TT
 
126
>.
 
127
 </P
 
128
><DIV
 
129
CLASS="SECT2"
 
130
><H2
 
131
CLASS="SECT2"
 
132
><A
 
133
NAME="AEN128352"
 
134
>F.2.1. Configuration Parameters</A
 
135
></H2
 
136
><P
 
137
></P
 
138
><DIV
 
139
CLASS="VARIABLELIST"
 
140
><DL
 
141
><DT
 
142
><TT
 
143
CLASS="VARNAME"
 
144
>auth_delay.milliseconds</TT
 
145
> (<TT
 
146
CLASS="TYPE"
 
147
>int</TT
 
148
>)</DT
 
149
><DD
 
150
><P
 
151
>      The number of milliseconds to wait before reporting an authentication
 
152
      failure.  The default is 0.
 
153
     </P
 
154
></DD
 
155
></DL
 
156
></DIV
 
157
><P
 
158
>   In order to set these parameters in your <TT
 
159
CLASS="FILENAME"
 
160
>postgresql.conf</TT
 
161
> file,
 
162
   you will need to add <TT
 
163
CLASS="LITERAL"
 
164
>auth_delay</TT
 
165
> to
 
166
   <A
 
167
HREF="runtime-config-custom.html#GUC-CUSTOM-VARIABLE-CLASSES"
 
168
>custom_variable_classes</A
 
169
>.  Typical usage might be:
 
170
  </P
 
171
><PRE
 
172
CLASS="PROGRAMLISTING"
 
173
># postgresql.conf
 
174
shared_preload_libraries = 'auth_delay'
 
175
 
 
176
custom_variable_classes = 'auth_delay'
 
177
auth_delay.milliseconds = '500'</PRE
 
178
></DIV
 
179
><DIV
 
180
CLASS="SECT2"
 
181
><H2
 
182
CLASS="SECT2"
 
183
><A
 
184
NAME="AEN128369"
 
185
>F.2.2. Author</A
 
186
></H2
 
187
><P
 
188
>   KaiGai Kohei <CODE
 
189
CLASS="EMAIL"
 
190
>&#60;<A
 
191
HREF="mailto:kaigai@ak.jp.nec.com"
 
192
>kaigai@ak.jp.nec.com</A
 
193
>&#62;</CODE
 
194
>
 
195
  </P
 
196
></DIV
 
197
></DIV
 
198
><DIV
 
199
CLASS="NAVFOOTER"
 
200
><HR
 
201
ALIGN="LEFT"
 
202
WIDTH="100%"><TABLE
 
203
SUMMARY="Footer navigation table"
 
204
WIDTH="100%"
 
205
BORDER="0"
 
206
CELLPADDING="0"
 
207
CELLSPACING="0"
 
208
><TR
 
209
><TD
 
210
WIDTH="33%"
 
211
ALIGN="left"
 
212
VALIGN="top"
 
213
><A
 
214
HREF="adminpack.html"
 
215
ACCESSKEY="P"
 
216
>Prev</A
 
217
></TD
 
218
><TD
 
219
WIDTH="34%"
 
220
ALIGN="center"
 
221
VALIGN="top"
 
222
><A
 
223
HREF="index.html"
 
224
ACCESSKEY="H"
 
225
>Home</A
 
226
></TD
 
227
><TD
 
228
WIDTH="33%"
 
229
ALIGN="right"
 
230
VALIGN="top"
 
231
><A
 
232
HREF="auto-explain.html"
 
233
ACCESSKEY="N"
 
234
>Next</A
 
235
></TD
 
236
></TR
 
237
><TR
 
238
><TD
 
239
WIDTH="33%"
 
240
ALIGN="left"
 
241
VALIGN="top"
 
242
>adminpack</TD
 
243
><TD
 
244
WIDTH="34%"
 
245
ALIGN="center"
 
246
VALIGN="top"
 
247
><A
 
248
HREF="contrib.html"
 
249
ACCESSKEY="U"
 
250
>Up</A
 
251
></TD
 
252
><TD
 
253
WIDTH="33%"
 
254
ALIGN="right"
 
255
VALIGN="top"
 
256
>auto_explain</TD
 
257
></TR
 
258
></TABLE
 
259
></DIV
 
260
></BODY
 
261
></HTML
 
262
>
 
 
b'\\ No newline at end of file'