MIME-Version: 1.0
References: <CAFsaSDgSPjLOmk51fZt_zYPEUnFOCQ+92g_g2OSMjNbMa4h2xg@mail.gmail.com>
 <CAKAnmmLBf33oSKxxANDztHR455BhEdO=AROGvXZa1crh7VchHg@mail.gmail.com> <CANzqJaDJ0_Aiih6X6AMfkRaWATFrHJMw_21oS-7im8JdN9SgrQ@mail.gmail.com>
In-Reply-To: <CANzqJaDJ0_Aiih6X6AMfkRaWATFrHJMw_21oS-7im8JdN9SgrQ@mail.gmail.com>
From: Greg Sabino Mullane <htamfids@gmail.com>
Date: Wed, 11 Dec 2024 15:00:45 -0500
Message-ID: <CAKAnmmJa8KPT0ievMUZK23_cHWBhL2jHKLUwkB_XpVCLDZsa9g@mail.gmail.com>
Subject: Re: Credcheck- credcheck.max_auth_failure
To: Ron Johnson <ronljohnsonjr@gmail.com>
Cc: "pgsql-generallists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000c6c0e50629040fca"
Archived-At: <https://www.postgresql.org/message-id/CAKAnmmJa8KPT0ievMUZK23_cHWBhL2jHKLUwkB_XpVCLDZsa9g%40mail.gmail.com>
Precedence: bulk

--000000000000c6c0e50629040fca
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wed, Dec 11, 2024 at 1:44=E2=80=AFPM Ron Johnson <ronljohnsonjr@gmail.co=
m> wrote:

> Isn't this a pretty common password setting?  I know that for at least 35
> years, and going back to the VAX/VMS days I've been  locked out for X hou=
rs
> if I typed an invalid password.  Same on Windows and I think also Linux
> (though ssh public keys and clients remembering passwords mean that rarel=
y
> happens to me).


Not in the same way, no. There are tools/policies that will stop one from
connecting endlessly from the same IP. Certainly on Linux, you can try over
and over. Matter of fact, here's a random Linux test box I have on the
internet, and logging in to root just gave me this message today:

*Last login: Tue Dec  3 19:12:22 EST 2024 on pts/0 *
*There were 79522 failed login attempts since the last successful login*

:)

Cheers,
Greg

--000000000000c6c0e50629040fca
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Wed, Dec 11, 2024 at 1:44=E2=80=AFPM R=
on Johnson &lt;<a href=3D"mailto:ronljohnsonjr@gmail.com">ronljohnsonjr@gma=
il.com</a>&gt; wrote:</div><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex=
">Isn&#39;t this a pretty common password setting?=C2=A0 I know that for at=
 least 35 years, and going back to the VAX/VMS days I&#39;ve been=C2=A0 loc=
ked out for X hours if I typed an invalid password.=C2=A0 Same on Windows a=
nd I think also Linux (though ssh public keys and clients remembering passw=
ords mean that rarely happens to me).</blockquote><div class=3D"gmail_quote=
 gmail_quote_container"><div><br></div><div>Not in the same way, no. There =
are tools/policies that will stop one from connecting endlessly from the sa=
me IP. Certainly on Linux, you can try over and over. Matter of fact, here&=
#39;s a random Linux test box I have on the internet, and logging in to roo=
t just gave me this message today:</div><div><br></div><div><b>Last login: =
Tue Dec =C2=A03 19:12:22 EST 2024 on pts/0=C2=A0</b></div><div><b>There wer=
e 79522 failed login attempts since the last successful login</b></div><div=
><br></div><div>:)</div><div><br></div><div>Cheers,</div><div>Greg</div><di=
v><br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
</blockquote></div></div>

--000000000000c6c0e50629040fca--