Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-29209

Implement connection response delay after a number of failed login attempts

Details

    Description

      MySQL 5.7 introduced the Connection Control plugins to implement an increasing delay in server response to connection attempts after a configurable number of consecutive failed attempts.
      https://dev.mysql.com/doc/refman/5.7/en/connection-control.html

      This is aimed as a deterrent for brute force attacks. A user requested this feature - https://mariadb.com/kb/en/is-there-a-mariadb-equivalent-to-mysql-connection_control-plugin/

      Attachments

        Issue Links

          is part of

          Task - A task that needs to be done. MDEV-28906 MySQL 8.0 desired compatibility

          • Major - Major loss of function.
          • Open
          relates to

          Task - A task that needs to be done. MDEV-7598 Block user accounts after failed login attempts

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. MDEV-23729 INFORMATION_SCHEMA Table info. about user locked due to max_password_errors

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-19133 Limit / throttle connection attempts

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Activity

            Ascending order - Click to sort in descending order
            View 6 older comments
            Kurt Ding kurt.ding added a comment -

            Hard code for min/max and a threshold values is much simpler. I will start do this work today

            Kurt Ding kurt.ding added a comment - Hard code for min/max and a threshold values is much simpler. I will start do this work today
            Kurt Ding kurt.ding added a comment -

            PR is ready , it would be nice if PR got comments.

            Kurt Ding kurt.ding added a comment - PR is ready , it would be nice if PR got comments.
            serg Sergei Golubchik added a comment -

            It will. At the moment we're mainly working on bugs, though. and will start looking into features again in February.

            serg Sergei Golubchik added a comment - It will. At the moment we're mainly working on bugs, though. and will start looking into features again in February.
            cvicentiu Vicențiu Ciorbaru added a comment -

            This patch needs additional work. When I get back to working on this task, I'll mark it into in-progress.

            cvicentiu Vicențiu Ciorbaru added a comment - This patch needs additional work. When I get back to working on this task, I'll mark it into in-progress.
            svoj Sergey Vojtovich added a comment -

            Reset contribution label as there is no active pull request.

            svoj Sergey Vojtovich added a comment - Reset contribution label as there is no active pull request.

            People

              cvicentiu Vicențiu Ciorbaru
              greenman Ian Gilfillan
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.