Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
redis
Commits
7604ab71
Commit
7604ab71
authored
Feb 05, 2019
by
antirez
Browse files
ACL: redis.conf: mark old ACL-alike stuff as deprecated.
parent
cc116736
Changes
1
Hide whitespace changes
Inline
Side-by-side
redis.conf
View file @
7604ab71
...
@@ -493,20 +493,39 @@ replica-priority 100
...
@@ -493,20 +493,39 @@ replica-priority 100
################################## SECURITY ###################################
################################## SECURITY ###################################
# Require clients to issue AUTH <PASSWORD> before processing any other
# Warning: since Redis is pretty fast an outside user can try up to
# commands. This might be useful in environments in which you do not trust
# 1 million passwords per second against a modern box. This means that you
# others with access to the host running redis-server.
# should use very strong passwords, otherwise they will be very easy to break.
# Note that because the password is really a shared secret between the client
# and the server, and should not be memorized by any human, the password
# can be easily a long string from /dev/urandom or whatever, so by using a
# long and unguessable password no brute force attack will be possible.
# Instead of configuring users here in this file, it is possible to use
# a stand-alone file just listing users. The two methods cannot be mixed:
# if you configure users here and at the same time you activate the exteranl
# ACL file, the server will refuse to start.
#
#
# Th
is should stay commented out for backward compatibility and because most
# Th
e format of the external ACL user file is exactly the same as the
#
people do not need auth (e.g. they run their own serv
ers
)
.
#
format that is used inside redis.conf to describe us
ers.
#
#
# Warning: since Redis is pretty fast an outside user can try up to
# aclfile /etc/redis/users.acl
# 150k passwords per second against a good box. This means that you should
# use a very strong password otherwise it will be very easy to break.
# IMPORTANT NOTE: starting with Redis 6 "requirepass" is just a compatiblity
# layer on top of the new ACL system. The option effect will be just setting
# the password for the default user. Clients will still authenticate using
# AUTH <password> as usually, or more explicitly with AUTH default <password>
# if they follow the new protocol: both will work.
#
#
# requirepass foobared
# requirepass foobared
# Command renaming.
# Command renaming (DEPRECATED).
#
# ------------------------------------------------------------------------
# WARNING: avoid using this option if possible. Instead use ACLs to remove
# commands from the default user, and put them only in some admin user you
# create for administrative purposes.
# ------------------------------------------------------------------------
#
#
# It is possible to change the name of dangerous commands in a shared
# It is possible to change the name of dangerous commands in a shared
# environment. For instance the CONFIG command may be renamed into something
# environment. For instance the CONFIG command may be renamed into something
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment