This document describes the custom password strength feature of TDSQL-C for MySQL.
Feature overview
Passwords are the most important means for protecting database security. As more data security regulations are introduced, there are higher requirements for the database password strength. TDSQL-C for MySQL supports the custom password strength feature to protect your database security and meet your needs for compliance with applicable regulations.
You can configure this feature in the console to enable password strength for all password-related operations. This helps protect your passwords from leakage or other risks. The feature offers the following configuration items:
|
Min Number of Uppercase and Lowercase Pair | Default value: 1. Value range: 1–50. |
| Default value: 1. Value range: 1–50. |
| Default value: 1. Value range: 1–50. |
| Default value: 8. Value range: 8–256. |
| If the password strength level is STRONG, this parameter is configurable. Each non-compliant word can contain 4–100 letters. |
| You can select MEDIUM or STRONG as the strength level. MEDIUM: The feature under this setting will check the length, digits, letters, and symbols. STRONG: The feature under this setting will check the length, digits, letters, symbols, and non-compliant word dictionary. |
| You can modify the feature parameters to flexibly adjust the password strength settings. |
| Parameter sync and batch disablement features are provided, so you can batch apply the configuration in multiple clusters at a time. |
After the custom password strength feature is enabled, you must meet the defined password strength requirements when setting passwords during operations such as account creation, password resetting, and account cloning.
When you connect to the database and use the command line to perform operations, if the custom password strength feature is enabled, all statements involving password setting will be restricted, such as CREATE USER, ALTER USER, and SET PASSWORD. When you use such statements to set or change an account password, the password must meet the defined password strength requirements.
Prerequisites
You have created a TDSQL-C for MySQL cluster.
Version limits
The custom password strength feature is supported by the following versions:
MySQL 5.7 on kernel minor version 2.0.21 or later and 2.1.7 or later.
MySQL 8.0 on kernel minor version 3.1.7.
Mutually exclusive tasks
A password strength customization task cannot be executed while a cluster is running another task, such as isolation, rollback, creation, minor version upgrade, or parameter modification. The two tasks are mutually exclusive and will be performed sequentially.
Relevant operations