Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

We are using MySQL Community version on Windows and are trying to secure it as best we can. Assuming that changing the version (for example purchasing the Enterprise edition) is not possible in our environment, I would love to hear how others are doing things such as:

  • Auditing
  • Alerts
  • Monitoring
  • Password rules
  • Account disabling after inactive for X days
  • Backups
  • Integrity checking
  • Encryption
  • Steganography detection

For example, we are using the general log for our cheap "auditing". Maybe not the best solution, but something is better than nothing. Any free tools out there, or maybe homegrown scripts anyone would like to suggest?

share|improve this question
add comment

closed as off-topic by Paul White, Michael - sqlbot, Mark Storey-Smith, Max Vernon, Kin Feb 6 at 20:18

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Shopping list question - questions about which tool, library, product or resource you should use are off-topic here because they quickly become obsolete and often are just about the preferences of the answerer. If you have an issue with or a question about a specific tool, please revise your question to conform to that scope." – Paul White, Michael - sqlbot, Mark Storey-Smith, Max Vernon, Kin
If this question can be reworded to fit the rules in the help center, please edit the question.

2 Answers

up vote 1 down vote accepted

Here are a few starting points (and I don't have answers to everything). Disclosure: I suggest a couple tools that were written by myself (and of course used in production).

  • Consider this login audit plugin (open sourced, find in GitHub). I developed & compiled in on Linux, you will have to find your way on Windows. This plugin will log any login attempt (successful or failed) onto your server.

We use the above to audit any login on any of our servers -- using logstash to aggregate all our logs, and kibana to view/query it. Likewise, you can query this log and send alerts to graphite / query by Nagios -- I don not know what bests suits Windows.

  • Consider common_schema's security_audit. This will generate a report on bad security settings (duplicate passwords, excessive privileges etc.). It does not do any steganography.

  • Check out GreenSQL - I never tried it myself. It's a proxy sittting between your clients and your MySQL server, that can analyse and block queries on the fly.

  • Check out MariaDB security enhancements, e.g. role management. Available for Windows.

share|improve this answer
    
Thanks Shlomi, this is great information! –  zako42 Feb 3 at 18:43
add comment

I have replied here MySQL query log

There are other methods for logging and secure your server using audit plugins and binary log, Using MySQL proxy etc..

share|improve this answer
    
Mahesh, thanks for the info! I will look into some of the other available MySQL logs. The plugins don't apply to me because we're stuck on Windows, and on the Community version, not Enterprise. –  zako42 Feb 3 at 18:48
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.