This document describes the custom password strength feature of TDSQL-C for MySQL.
Passwords are the most important line of defense for database security. As more data security regulations are introduced, there are higher requirements for the database password strength. TDSQL-C for MySQL supports the custom password strength feature to protect your database security and meet your needs for compliance with applicable regulations.
You can configure the custom password strength feature in the console to set the password strength for all console and database operations involving a password. This helps protect your passwords and prevent security risks such as password leakage. The feature offers the following configuration items:
|Min Number of Uppercase and Lowercase Pair||Default value:
|Min Number of Digits||Default value:
|Min Number of Symbols||Default value:
|Min Password Length||Default value:
|Non-Compliant Dictionary||If the password strength level is STRONG, this parameter is configurable. Each non-compliant word can contain 4–100 letters.|
|Password Strength Level||You can select MEDIUM or STRONG as the strength level.
|Modify Parameters||You can modify the feature parameters to flexibly adjust the password strength settings.|
|Parameter Sync||Parameter sync and batch disablement features are provided, so you can batch apply the configuration in multiple clusters at a time.|
After the custom password strength feature is enabled, you can configure the password settings for account creation, password resetting, and account cloning operations, and passwords set during such operations must meet the configured password strength requirements.
When you connect to the database and use the command line to perform operations, if the custom password strength feature is enabled, all statements involving password setting will be restricted, such as CREATE USER, ALTER USER, and SET PASSWORD. When you use such statements to set or change an account password, the password must meet the configured password strength requirements.
You have created a TDSQL-C for MySQL cluster.
The custom password strength feature is supported by the following versions:
You can use this feature only after upgrading the kernel to the above versions. For detailed directions, see Upgrading Kernel Minor Version.
When a task such as cluster isolation, rollback, or creation, minor version upgrade, or parameter modification is running in the cluster, a password strength customization task cannot be executed, and the two tasks will be executed in sequence.