tldr; Is there a dual-password-like feature for MySQL v.5.x ?
I have a MySQL server that needs to temporarily allow two passwords for one account, due to legal constraints that impose DBMS service accounts to periodically change password.
I don't think I can just change service account pw because there would be some (albeit little) time gap
between DBMS pw change and DB access information on server-side code that needs to be deployed when changed.
I understand there is a dual-password feature that allows primary/secondary pw,
but the feature is from v 8.0 to which I cannot upgrade.
I am under following constraints & environments:
- cannot add more accounts (ex. adding user accounts that change pw and fixing admin account's pw)
- cannot update MySQL version (current version: 5.7.12)
- DB is hosted on AWS RDS
- DB access information on server-side code is retrieved from AWS parameter store
I am aware of AWS CLI/API that requests change in AWS RDS and AWS parameter store respectively, yet the time-gap problem still remains.
Is there an old version equivalent of dual-password? Or is there a way to manually implement it?
Alternatively, is there an AWS feature that could safely sync aws parameter store change and aws rds pw change?
Finally, does the pw change in DBMS immediately/forcefully disconnect existing connection pool for re-authorization? or does it only apply to new connections? is there an option for this behavior?