[MDEV-9245] password "reuse prevention" validation plugin Created: 2015-12-07 Updated: 2023-11-27 Resolved: 2021-10-21 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | Plugins |
| Fix Version/s: | 10.7.1 |
| Type: | Task | Priority: | Critical |
| Reporter: | Sergei Golubchik | Assignee: | Oleksandr Byelkin |
| Resolution: | Fixed | Votes: | 4 |
| Labels: | Preview_10.7, Security | ||
| Issue Links: |
|
||||||||||||||||||||||||||||||||||||||||
| Description |
|
A password validation plugin to prevent password reuse. It keeps a log of hashes of passwords it has successfully validated before and verifies that a new password is not present in the log. |
| Comments |
| Comment by Nirmol Chondri [ 2019-03-01 ] |
|
hello |
| Comment by Geoff Montee (Inactive) [ 2019-05-22 ] |
|
It looks like MySQL 8.0 added a feature like this: |
| Comment by MikaH [ 2020-01-23 ] |
|
Is this proceeding? We have large scale Customers demanding this to be implemented. Thank you. |
| Comment by Sergei Golubchik [ 2020-01-23 ] |
|
At the moment it's not progressing. MariaDB Foundation is a non-profit organization and tries to treat all its users fairly and equally. And for now other more widely requested features were prioritized over this one. If your customers demand a feature, you can get in touch with one of commercial MariaDB support providers, for example, MariaDB Corporation, that has a big pool of developers, and you'll be able in turn to demand something to be implemented. |
| Comment by Sergei Golubchik [ 2020-01-23 ] |
|
This feature is currently considered a candidate for the next major release of MariaDB Server |
| Comment by Oleksandr Byelkin [ 2021-01-26 ] |
|
IMHO timestamp in mysql table is not so interesting (it is better to loock in audit data) as which time password changed (easier to handle) but is it my IMHO |
| Comment by Oleksandr Byelkin [ 2021-01-26 ] |
|
on practice the feature is useless user can change password history_length+1 times and return old password |
| Comment by Oleksandr Byelkin [ 2021-09-07 ] |
|
branch bb-10.7- |
| Comment by Oleksandr Byelkin [ 2021-09-09 ] |
|
new commit |
| Comment by Oleksandr Byelkin [ 2021-09-10 ] |
|
branch bb-10.7- |
| Comment by Sergei Golubchik [ 2021-09-11 ] |
|
ok to push after adding tests for sql errors in the plugin (on top of the commit 0e09bc41cbab05ba1f67c7bf491b9aeebe0bec16) |