Home  >  Article  >  Database  >  MySql5.6 uses the validate password plug-in to install and use methods to strengthen password strength_MySQL

MySql5.6 uses the validate password plug-in to install and use methods to strengthen password strength_MySQL

WBOY
WBOYOriginal
2016-08-20 08:48:121294browse

mysql 5.6 strengthens password strength and launches the validate_password plug-in. Support password strength requirements.

Installation method:

Open in profile

[mysqld]

plugin-load=validate_password.so
validate-password=FORCE_PLUS_PERMANENT
validate_password_policy=2

and load plugin:

mysql>>INSTALL PLUGIN validate_password SONAME 'validate_password.so';

That’s it.

When establishing a user password, if it does not meet the preset rules, it will not pass:

mysql>grant all on *.* to tester@'localhost' identified by 'tasssss';
ERROR 1819 (HY000): Your password does not satisfy the current policy requirements;

The following will introduce to you how to use the mysql 5.6 password strength plug-in

In mysql 5.6, the strength of passwords has been strengthened and the validate_password plug-in has been launched. Support password strength requirements.

This plug-in requires version: 5.6.6 or above

Installation method:

1. Install the plug-in: (After the plug-in is installed by default, the strength plug-in is enabled and closed. You need to set the relevant shutdown parameters in the configuration file)

mysql>INSTALL PLUGIN validate_password SONAME 'validate_password.so';

2. Add some parameters to the configuration file:

plugin-load=validate_password.so
validate_password_policy=2
validate-password=FORCE_PLUS_PERMANENT

3. After the above processing, you can test:

mysql> SET PASSWORD = PASSWORD('abc');
ERROR 1819 (HY000): Your password does not satisfy the current policy requirements
mysql> SET PASSWORD = '*0D3CED9BEC10A777AEC23CCC353A8C08A633045E';

jQuery OK, 0 rows affected (0.01 sec)

4. Related instructions:

(1).Related options:

validate-password=ON/OFF/FORCE/FORCE_PLUS_PERMANENT: Decide whether to use this plug-in (and force/permanently force use).

validate_password_dictionary_file: The dictionary file path used by the plug-in to verify password strength.

validate_password_length: Minimum password length.

validate_password_mixed_case_count: The minimum number of lowercase letters and the number of uppercase letters that the password must contain.

validate_password_number_count: The minimum number of digits that the password must contain.

validate_password_policy: Password strength check level, 0/LOW, 1/MEDIUM, 2/STRONG.

validate_password_special_char_count: The minimum number of special characters that the password must contain.

Among them, regarding validate_password_policy-password strength check level:

0/LOW: Only check the length.

1/MEDIUM: Check length, numbers, case, special characters.

2/STRONG: Check length, numbers, case, and special character dictionary files.

(2). Installation and activation of plug-in:

The library object file corresponding to the plug-in must be in the directory specified by the configuration option plugin_dir.

You can use --plugin-load=validate_password.so to load the plug-in when the server starts, or write plugin-load=validate_password.so into the configuration file.

You can also load the plug-in when the server is running through the following statement (it will be registered in the mysql.plugins table)

mysql> INSTALL PLUGIN validate_password SONAME 'validate_password.so';

(3). To prevent the plug-in from being deleted at runtime, add:
in the configuration file

plugin-load=validate_password.so
validate-password=FORCE_PLUS_PERMANENT

The above is the installation and use method of using the validate password plug-in to strengthen the password strength of MySql5.6 introduced by the editor. I hope it will be helpful to you. If you have any questions, please leave me a message and the editor will reply to you in time. of. Thank you very much for your support of the website!

Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn