hcq/MaxScale
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MXS-2414: Add max_auth_failures parameter

Browse Source 
The parameter controls how many authentication failures are allowed until
the host is blocked. The default is 10 failures per thread.
This commit is contained in:
Markus Mäkelä
2019-04-24 09:37:36 +03:00
parent cf86b0cb7e
commit db0e491ace
5 changed files with 41 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
server/core/config_runtime.cc
View File

@ -523,12 +523,12 @@ bool runtime_enable_server_ssl(Server* server,
* @param value String value
* @return 0 on error, otherwise a positive integer
*/
static long get_positive_int(const char* value)
static int get_positive_int(const char* value)
{
char* endptr;
long ival = strtol(value, &endptr, 10);
if (*endptr == '\0' && ival > 0)
if (*endptr == '\0' && ival > 0 && ival < std::numeric_limits<int>::max())
{
return ival;
}
@ -605,7 +605,7 @@ bool runtime_alter_server(Server* server, const char* key, const char* value)
}
else if (strcmp(key, CN_PORT) == 0)
{
if (long ival = get_positive_int(value))
if (int ival = get_positive_int(value))
{
server->update_port(ival);
}
@ -1089,6 +1089,22 @@ bool runtime_alter_maxscale(const char* name, const char* value)
CN_DUMP_LAST_STATEMENTS);
}
}
else if (key == CN_MAX_AUTH_FAILURES)
{
if (int intval = get_positive_int(value))
{
MXS_NOTICE("Updated '%s' from %d to %d",
CN_MAX_AUTH_FAILURES,
cnf.max_auth_failures,
intval);
cnf.max_auth_failures = intval;
rval = true;
}
else
{
config_runtime_error("Invalid value for '%s': %s", CN_MAX_AUTH_FAILURES, value);
}
}
else if (config_can_modify_at_runtime(key.c_str()))
{
config_runtime_error("Global parameter '%s' cannot be modified at runtime", name);