MySQL Forums
Forum List  »  Security

Re: validate_password plugin stick with MEDIUM policy after mysql reboot on UBUNTU
Posted by: Georgi Kodinov
Date: February 02, 2019 05:23AM

In order to supply values for system variables defined in a plugin one of the two things should happen:
1. the plugin should be present when the configuration file is read. This is ensured either through loading the plugin via the command line (as you did above) or via installing the plugin via INSTALL PLUGIN SQL command.
2. You specify the --loose prefix to your variables (e.g. --loose-validate_password_policy=LOW). This makes the server to tolerate the unknown option value and not refuse to start in a hope that a later INSTALL PLUGIN command will add the plugin that will read the value supplied.

I would personally suggest that you use #1 (as you did). This prevents you from accumulating options that are e.g. spelled wrong etc.

Also FYI, SET GLOBAL is a run-time operation only. It doesn't persist the value in any shape or form. The moment your server is restarted the SET GLOBAL value is gone.

In 8.0 we have added something called SET PERSIST that does what SET GLOBAL does, but also persists the value.

I suggest you study it (https://dev.mysql.com/doc/refman/8.0/en/persisted-system-variables.html) and consider upgrading to mysql 8.0 to take advantage of it if you like it.

Georgi "Joro" Kodinov
MySQL SrvGen team lead
Plovdiv, Bulgaria

Options: ReplyQuote


Subject
Views
Written By
Posted
Re: validate_password plugin stick with MEDIUM policy after mysql reboot on UBUNTU
697
February 02, 2019 05:23AM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.