Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-9245

password "reuse prevention" validation plugin

Details

    Description

      A password validation plugin to prevent password reuse. It keeps a log of hashes of passwords it has successfully validated before and verifies that a new password is not present in the log.

      Attachments

        Issue Links

          blocks

          Task - A task that needs to be done. MDEV-19275 Provide SQL service to plugins.

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          causes

          Bug - A problem which impairs or prevents the functions of the product. MDEV-26647 Include password validation plugin information in the error message if the SQL statement is not satisfied password policy

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-26650 Failed ALTER USER/GRANT statement removes the password from the cache

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-28838 password_reuse_check plugin mixes username and password

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          duplicates

          Task - A task that needs to be done. MDEV-9072 MariaDB Community Edition needs password complexity, expiration, and reuse

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-9244 Add password auto expiration option and history password control feature

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            Descending order - Click to sort in ascending order
            serg Sergei Golubchik added a comment -

            ok to push after adding tests for sql errors in the plugin (on top of the commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16)

            serg Sergei Golubchik added a comment - ok to push after adding tests for sql errors in the plugin (on top of the commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16)
            sanja Oleksandr Byelkin added a comment -

            branch bb-10.7-MDEV-9245-5 commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16

            sanja Oleksandr Byelkin added a comment - branch bb-10.7- MDEV-9245 -5 commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16
            sanja Oleksandr Byelkin added a comment -

            new commit
            cf3c58e85a2dc7fff12f43b5e95577c22829b317

            sanja Oleksandr Byelkin added a comment - new commit cf3c58e85a2dc7fff12f43b5e95577c22829b317
            sanja Oleksandr Byelkin added a comment -

            branch bb-10.7-MDEV-9245-4
            commits:
            ca4ef7185da363f17d5ef13a40e3572d533e98db
            271afbc88e48307299c7a38abfb74dc372c7eb2c

            sanja Oleksandr Byelkin added a comment - branch bb-10.7- MDEV-9245 -4 commits: ca4ef7185da363f17d5ef13a40e3572d533e98db 271afbc88e48307299c7a38abfb74dc372c7eb2c
            sanja Oleksandr Byelkin added a comment - - edited

            on practice the feature is useless user can change password history_length+1 times and return old password

            sanja Oleksandr Byelkin added a comment - - edited on practice the feature is useless user can change password history_length+1 times and return old password
            View 6 older comments

            People

              sanja Oleksandr Byelkin
              serg Sergei Golubchik
              Votes:
              4 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.