Details
-
Task
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Duplicate
Description
Some users would like the ability to lock user accounts after a configurable number of authentication failures, so that brute force password checking can be prevented.
MariaDB's current host blocking mechanism can help prevent problems like this if all authentication attempts come from the same host, but it does not help if the attacker is controlling many hosts. For example, this might be a problem if the attacker were controlling a botnet.
This task might require MDEV-13095 to be implemented first.
Attachments
Issue Links
- is duplicated by
-
-
- Closed
-
- relates to
-
-
- Closed
-
Activity
| Field | Original Value | New Value |
|---|---|---|
| Link |
This issue is blocked by |
| Fix Version/s | 10.4 [ 22408 ] |
| Link |
This issue relates to |
| Assignee | Vladislav Vaintroub [ wlad ] |
| Epic Link | PT-73 [ 68549 ] |
| Priority | Major [ 3 ] | Critical [ 2 ] |
| Rank | Ranked higher |
| Assignee | Vladislav Vaintroub [ wlad ] | Vicentiu Ciorbaru [ cvicentiu ] |
| Fix Version/s | N/A [ 14700 ] | |
| Fix Version/s | 10.4 [ 22408 ] | |
| Resolution | Duplicate [ 3 ] | |
| Status | Open [ 1 ] | Closed [ 6 ] |
| Epic Link | PT-73 [ 68549 ] |
| Link |
This issue is blocked by |
| Workflow | MariaDB v3 [ 81242 ] | MariaDB v4 [ 133292 ] |
| Zendesk Related Tickets | 190825 |