第21章【高级篇】MySQL密码管理、配置文件的使用、系统变量

# 【宋红康 MySQL数据库】【高级篇】MySQL密码管理、配置文件的使用、系统变量

# MySQL8密码管理

在这里插入图片描述

# 密码过期策略

在这里插入图片描述

# 密码重用策略

在这里插入图片描述

# 密码强度评估

MySQL不同版本设置密码（可能出现）

在这里插入图片描述

MySQL8之前的安全策略

在这里插入图片描述

MySQL8的安全策略

在这里插入图片描述

mysql> SELECT * FROM mysql.component;
+--------------+--------------------+------------------------------------+
| component_id | component_group_id | component_urn                      |
+--------------+--------------------+------------------------------------+
|            1 |                  1 | file://component_validate_password |
+--------------+--------------------+------------------------------------+
1 row in set (0.00 sec)

mysql> SHOW VARIABLES LIKE 'validate_password%';
+--------------------------------------+--------+
| Variable_name                        | Value  |
+--------------------------------------+--------+
| validate_password.check_user_name    | ON     |
| validate_password.dictionary_file    |        |
| validate_password.length             | 8      |
| validate_password.mixed_case_count   | 1      |
| validate_password.number_count       | 1      |
| validate_password.policy             | MEDIUM |
| validate_password.special_char_count | 1      |
+--------------------------------------+--------+
7 rows in set (0.01 sec)

mysql>

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

在这里插入图片描述

卸载插件、组件

在这里插入图片描述

卸载组件：
UNINSTALL COMPONENT 'file://component_validate_password';

1
2

# 设置当前用户密码

在这里插入图片描述

ALTER USER USER() IDENTIFIED BY '$$AAaa11';

在这里插入图片描述

SET PASSWORD = '$$AAaa11';

注意：MySQL的密码是加密存储的：

mysql> USE mysql;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
mysql> DESC user;
+--------------------------+-----------------------------------+------+-----+-----------------------+-------+
| Field                    | Type                              | Null | Key | Default               | Extra |
+--------------------------+-----------------------------------+------+-----+-----------------------+-------+
| Host                     | char(255)                         | NO   | PRI |                       |       |
| User                     | char(32)                          | NO   | PRI |                       |       |
| ...
|
| authentication_string    | text                              | YES  |     | NULL                  |         |
+--------------------------+-----------------------------------+------+-----+-----------------------+-------+
51 rows in set (0.01 sec)

mysql> SELECT host,user,authentication_string FROM user;
+-----------+------------------+------------------------------------------------------------------------+
| host      | user             | authentication_string                                                  |
+-----------+------------------+------------------------------------------------------------------------+
| %         | li4              | $A$005$%PuS&){IJ&
                                                  #<pY1z2QVmQeNO9qSbJD/Fe5yJSNCrrjstiuyg.oWQYkaE0 |
| %         | root             | $A$005$bYe"7}WMlw#pNiztA2QKoYFam5f6ITf77huiMiyc66UjVZ7gegammJZPOe9 |
| %         | zs               | $A$005$mqF43epM/[A!p=ZKIwEICmL.uhssLLSCo5hxfHpYagr0IUC8u4ZgfjXLrB |
| localhost | mysql.infoschema | $A$005$THISISACOMBINATIONOFINVALIDSALTANDPASSWORDTHATMUSTNEVERBRBEUSED |
| localhost | mysql.session    | $A$005$THISISACOMBINATIONOFINVALIDSALTANDPASSWORDTHATMUSTNEVERBRBEUSED |
| localhost | mysql.sys        | $A$005$THISISACOMBINATIONOFINVALIDSALTANDPASSWORDTHATMUSTNEVERBRBEUSED |
| localhost | zhang3           | $A$005$Z1lB:9acHu+s# JFKCqAix.k7Yts0.iGBbEXTa7YspVDdLkd1f/aXy2AZB |
+-----------+------------------+------------------------------------------------------------------------+
7 rows in set (0.00 sec)