2010-11-27 20:22:25 +08:00
|
|
|
/* -------------------------------------------------------------------------
|
|
|
|
*
|
|
|
|
* auth_delay.c
|
|
|
|
*
|
2011-03-10 14:05:33 +08:00
|
|
|
* Copyright (C) 2010-2011, PostgreSQL Global Development Group
|
2010-11-27 20:22:25 +08:00
|
|
|
*
|
|
|
|
* IDENTIFICATION
|
|
|
|
* contrib/auth_delay/auth_delay.c
|
|
|
|
*
|
|
|
|
* -------------------------------------------------------------------------
|
|
|
|
*/
|
|
|
|
#include "postgres.h"
|
|
|
|
|
|
|
|
#include "libpq/auth.h"
|
|
|
|
#include "port.h"
|
|
|
|
#include "utils/guc.h"
|
|
|
|
#include "utils/timestamp.h"
|
|
|
|
|
|
|
|
PG_MODULE_MAGIC;
|
|
|
|
|
2011-04-10 23:42:00 +08:00
|
|
|
void _PG_init(void);
|
2010-11-27 20:22:25 +08:00
|
|
|
|
|
|
|
/* GUC Variables */
|
|
|
|
static int auth_delay_milliseconds;
|
|
|
|
|
|
|
|
/* Original Hook */
|
2011-04-10 23:42:00 +08:00
|
|
|
static ClientAuthentication_hook_type original_client_auth_hook = NULL;
|
2010-11-27 20:22:25 +08:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Check authentication
|
|
|
|
*/
|
|
|
|
static void
|
|
|
|
auth_delay_checks(Port *port, int status)
|
|
|
|
{
|
|
|
|
/*
|
|
|
|
* Any other plugins which use ClientAuthentication_hook.
|
|
|
|
*/
|
|
|
|
if (original_client_auth_hook)
|
|
|
|
original_client_auth_hook(port, status);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Inject a short delay if authentication failed.
|
|
|
|
*/
|
|
|
|
if (status != STATUS_OK)
|
|
|
|
{
|
|
|
|
pg_usleep(1000L * auth_delay_milliseconds);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Module Load Callback
|
|
|
|
*/
|
|
|
|
void
|
|
|
|
_PG_init(void)
|
|
|
|
{
|
2011-04-07 12:11:01 +08:00
|
|
|
/* Define custom GUC variables */
|
2010-11-27 20:22:25 +08:00
|
|
|
DefineCustomIntVariable("auth_delay.milliseconds",
|
2011-04-10 23:42:00 +08:00
|
|
|
"Milliseconds to delay before reporting authentication failure",
|
2010-11-27 20:22:25 +08:00
|
|
|
NULL,
|
|
|
|
&auth_delay_milliseconds,
|
|
|
|
0,
|
|
|
|
0, INT_MAX,
|
|
|
|
PGC_SIGHUP,
|
|
|
|
GUC_UNIT_MS,
|
|
|
|
NULL,
|
2011-04-07 12:11:01 +08:00
|
|
|
NULL,
|
2010-11-27 20:22:25 +08:00
|
|
|
NULL);
|
|
|
|
/* Install Hooks */
|
|
|
|
original_client_auth_hook = ClientAuthentication_hook;
|
|
|
|
ClientAuthentication_hook = auth_delay_checks;
|
|
|
|
}
|