Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-9072

MariaDB Community Edition needs password complexity, expiration, and reuse

Details

    Description

      In order to comply with common industry security standards, MariaDB needs the following:
      1. Password complexity. Require at least 8 characters with 3 of 4 categories (lower case, upper case, numbers, special characters).
      2. Password Expiration: Able to set a password expiration for user account.
      3. Password Reuse: Prevent reuse of password based on number of days.

      Attachments

        Issue Links

          duplicates

          Task - A task that needs to be done. MDEV-9244 Add password auto expiration option and history password control feature

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is duplicated by

          Task - A task that needs to be done. MDEV-6431 password validation

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-7597 Expiration of user passwords

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-9245 password "reuse prevention" validation plugin

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            serg Sergei Golubchik added a comment -
            1. "Password complexity" task is delegated in MariaDB 10.1 to password validation plugins. In particular, the rule like "at least 8 characters with 3 of 4 categories" can be done with the simple_password_check plugin.
            2. "Password expiration" checks are not supported in MariaDB 10.1. They can be implemented in 10.2 though. See MDEV-7597.
            3. "Password reuse" prevention can be easily implemented as a password validation plugin in MariaDB 10.1. But we don't ship a ready-to-use plugin for it yet.
            serg Sergei Golubchik added a comment - "Password complexity" task is delegated in MariaDB 10.1 to password validation plugins . In particular, the rule like "at least 8 characters with 3 of 4 categories" can be done with the simple_password_check plugin. "Password expiration" checks are not supported in MariaDB 10.1. They can be implemented in 10.2 though. See MDEV-7597 . "Password reuse" prevention can be easily implemented as a password validation plugin in MariaDB 10.1. But we don't ship a ready-to-use plugin for it yet.
            serg Sergei Golubchik added a comment -

            This issue is, in fact, three different issues, where the first one — MDEV-6431 — is already completed, the second — MDEV-7597 — will probably be in 10.2, and the third is basically covered by MDEV-6431, but we don't have a ready-to-use plugin for it.

            Thus I'm closing this issue as a duplicate of MDEV-6431 and MDEV-7597. Shall I create a new issue for a password reuse prevention plugin?

            serg Sergei Golubchik added a comment - This issue is, in fact, three different issues, where the first one — MDEV-6431 — is already completed, the second — MDEV-7597 — will probably be in 10.2, and the third is basically covered by MDEV-6431 , but we don't have a ready-to-use plugin for it. Thus I'm closing this issue as a duplicate of MDEV-6431 and MDEV-7597 . Shall I create a new issue for a password reuse prevention plugin?
            serg Sergei Golubchik added a comment -

            Created MDEV-9245 — password "reuse prevention" validation plugin

            serg Sergei Golubchik added a comment - Created MDEV-9245 — password "reuse prevention" validation plugin

            People

              Unassigned Unassigned
              aferrett Andy Ferretti
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.