auth_delay

PostgreSQL 9.1.0 Documentation
Prev | Fast Backward | Appendix F. Additional Supplied Modules | Fast Forward | Next

# F.2. auth_delay

`auth_delay` causes the server to pause briefly before reporting authentication failure, to make brute-force attacks on database passwords more difficult. Note that it does nothing to prevent denial-of-service attacks, and may even exacerbate them, since processes that are waiting before reporting authentication failure will still consume connection slots.

In order to function, this module must be loaded via shared_preload_libraries in `postgresql.conf`.

## F.2.1. Configuration Parameters

`auth_delay.milliseconds` (`int`)

  The number of milliseconds to wait before reporting an authentication failure. The default is 0.

In order to set these parameters in your `postgresql.conf` file, you will need to add `auth_delay` to custom_variable_classes. Typical usage might be:

    # postgresql.conf
    shared_preload_libraries = 'auth_delay'

    custom_variable_classes = 'auth_delay'
    auth_delay.milliseconds = '500'

## F.2.2. Author

KaiGai Kohei `<kaigai@ak.jp.nec.com>`

Prev | Home | Next
adminpack | Up | auto_explain