1

I wonder if there is any possibility to use the password validation for MySQL 5.6 (https://dev.mysql.com/doc/refman/5.6/en/validate-password.html) to prevent for example the last 4 passwords.

The possibility to prevent a user from choosing a simple password but allow the user to always choose the same password seems to be a little bit odd.

Sadly I am not able to upgrade the MySQL server.

6
  • Are you talking about MySQL credentials or your app credentials? MySQL uses the authentication plugin only to control mysql.user table. – Jesus Uzcanga Oct 10 '19 at 21:00
  • I mean MySQL credentials stored in mysql.user table. – niecke Oct 11 '19 at 21:57
  • Write your own API front end; don't let the users log in directly to MySQL. – Rick James Oct 15 '19 at 0:04
  • Writing an API which has access to the internal mysql tables is no feasible solution for my use case. – niecke Oct 15 '19 at 8:07
  • Are you using the mysql.user table as a way to manage user accounts for your application? What's the use case here? Are you trying to implement domain-level password policies for db administrators? – jcolebrand Oct 15 '19 at 17:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.