HexaCluster/credcheck v2.4

Version 2.4.0

on GitHub

2024-01-30 - Version 2.4.0

This release is a maintenance release to fix a major issue with the backup of the
history file with pgBackRest and adds an authentication delay feature.

• Add authentication delay feature to be able to add a pause on authentication
  failure. Setting credcheck.auth_delay_ms causes the server to pause for a
  given number of milliseconds before reporting authentication failure. This
  makes brute-force attacks on database passwords more difficult.
  This patch is purely a copy/paste from the auth_delay extension to avoid
  loading other extension. See https://www.postgresql.org/docs/current/auth-delay.html
  for more information about the origin of this feature.
• Force size of file $PGDATA/global/pg_password_history to be a multiple of 8192
  to fix pgBackRest error caused by the error message: "page misalignment in file
  /.../global/pg_password_history: file size 2604 is not divisible by page size 8192"
  Thanks to did16 for the report.