Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-9245

password "reuse prevention" validation plugin

Details

    Description

      A password validation plugin to prevent password reuse. It keeps a log of hashes of passwords it has successfully validated before and verifies that a new password is not present in the log.

      Attachments

        Issue Links

          blocks

          Task - A task that needs to be done. MDEV-19275 Provide SQL service to plugins.

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          causes

          Bug - A problem which impairs or prevents the functions of the product. MDEV-26647 Include password validation plugin information in the error message if the SQL statement is not satisfied password policy

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-26650 Failed ALTER USER/GRANT statement removes the password from the cache

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-28838 password_reuse_check plugin mixes username and password

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          duplicates

          Task - A task that needs to be done. MDEV-9072 MariaDB Community Edition needs password complexity, expiration, and reuse

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-9244 Add password auto expiration option and history password control feature

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            darkboy123 Nirmol Chondri added a comment -

            hello

            darkboy123 Nirmol Chondri added a comment - hello
            GeoffMontee Geoff Montee (Inactive) added a comment -

            It looks like MySQL 8.0 added a feature like this:

            https://dev.mysql.com/doc/mysql-security-excerpt/8.0/en/password-management.html#password-reuse-policy

            GeoffMontee Geoff Montee (Inactive) added a comment - It looks like MySQL 8.0 added a feature like this: https://dev.mysql.com/doc/mysql-security-excerpt/8.0/en/password-management.html#password-reuse-policy
            mihaQ MikaH added a comment -

            Is this proceeding? We have large scale Customers demanding this to be implemented. Thank you.

            mihaQ MikaH added a comment - Is this proceeding? We have large scale Customers demanding this to be implemented. Thank you.
            serg Sergei Golubchik added a comment -

            At the moment it's not progressing. MariaDB Foundation is a non-profit organization and tries to treat all its users fairly and equally. And for now other more widely requested features were prioritized over this one.

            If your customers demand a feature, you can get in touch with one of commercial MariaDB support providers, for example, MariaDB Corporation, that has a big pool of developers, and you'll be able in turn to demand something to be implemented.

            serg Sergei Golubchik added a comment - At the moment it's not progressing. MariaDB Foundation is a non-profit organization and tries to treat all its users fairly and equally. And for now other more widely requested features were prioritized over this one. If your customers demand a feature, you can get in touch with one of commercial MariaDB support providers, for example, MariaDB Corporation, that has a big pool of developers, and you'll be able in turn to demand something to be implemented.
            serg Sergei Golubchik added a comment -

            This feature is currently considered a candidate for the next major release of MariaDB Server

            serg Sergei Golubchik added a comment - This feature is currently considered a candidate for the next major release of MariaDB Server
            sanja Oleksandr Byelkin added a comment -

            IMHO timestamp in mysql table is not so interesting (it is better to loock in audit data) as which time password changed (easier to handle) but is it my IMHO

            sanja Oleksandr Byelkin added a comment - IMHO timestamp in mysql table is not so interesting (it is better to loock in audit data) as which time password changed (easier to handle) but is it my IMHO
            sanja Oleksandr Byelkin added a comment - - edited

            on practice the feature is useless user can change password history_length+1 times and return old password

            sanja Oleksandr Byelkin added a comment - - edited on practice the feature is useless user can change password history_length+1 times and return old password
            sanja Oleksandr Byelkin added a comment -

            branch bb-10.7-MDEV-9245-4
            commits:
            ca4ef7185da363f17d5ef13a40e3572d533e98db
            271afbc88e48307299c7a38abfb74dc372c7eb2c

            sanja Oleksandr Byelkin added a comment - branch bb-10.7- MDEV-9245 -4 commits: ca4ef7185da363f17d5ef13a40e3572d533e98db 271afbc88e48307299c7a38abfb74dc372c7eb2c
            sanja Oleksandr Byelkin added a comment -

            new commit
            cf3c58e85a2dc7fff12f43b5e95577c22829b317

            sanja Oleksandr Byelkin added a comment - new commit cf3c58e85a2dc7fff12f43b5e95577c22829b317
            sanja Oleksandr Byelkin added a comment -

            branch bb-10.7-MDEV-9245-5 commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16

            sanja Oleksandr Byelkin added a comment - branch bb-10.7- MDEV-9245 -5 commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16
            serg Sergei Golubchik added a comment -

            ok to push after adding tests for sql errors in the plugin (on top of the commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16)

            serg Sergei Golubchik added a comment - ok to push after adding tests for sql errors in the plugin (on top of the commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16)

            People

              sanja Oleksandr Byelkin
              serg Sergei Golubchik
              Votes:
              4 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.